Peru's July Bonus Under Attack: Four Scams Targeting Workers' Pay
As millions of Peruvian workers prepare to receive their July "gratificación" bonus for Fiestas Patrias, cybercriminals are intensifying their efforts to defraud them. This extra income, typically used for debts, purchases, or savings, becomes a prime target for fraudsters who adapt their methods to exploit the increased financial activity. Cybersecurity and consumer defense specialists warn of a surge in phishing attempts, fake bank calls, fraudulent investment schemes, and non-existent online stores, all aiming to steal banking credentials or trick victims into voluntary transfers. These scams, while present year-round, see a heightened risk during holiday shopping periods due to the increased volume of transactions and offers. Peru's Central Reserve Bank, SBS, and Indecopi have issued alerts regarding these evolving criminal tactics. One common tactic involves SMS, email, or WhatsApp messages impersonating financial institutions, falsely claiming a bonus has been held, a suspicious transaction occurred, or a pending transfer needs verification to prevent account blocking. These messages often link to fake but identical bank login pages where victims unknowingly surrender their credentials. Another prevalent scam starts with a phone call from a supposed bank security department, informing the victim of a high-value purchase or unusual transfer. Using convincing language and preying on fear, the caller requests personal data, SMS verification codes, or authorization for transactions, sometimes leveraging previously leaked personal information to build credibility. Fraudulent investment campaigns are also flourishing, promising rapid wealth growth through fake cryptocurrency or stock platforms, increasingly using sophisticated AI-generated videos featuring public figures to lend legitimacy. Experts caution that official financial entities do not promote investments via social media videos, and any offer promising exceptionally high returns should be viewed with extreme suspicion.
The surge in financial scams targeting Peruvian workers during the July bonus period highlights a persistent vulnerability in digital financial ecosystems. Cybercriminals exploit predictable human behaviors, such as the desire to maximize new income and the fear of financial loss, by leveraging sophisticated social engineering and increasingly advanced AI-generated content. This situation underscores the critical need for continuous public education on digital security best practices, emphasizing verification through official channels and skepticism towards unsolicited communications. Furthermore, it points to systemic challenges in data protection and the need for robust regulatory frameworks that can adapt to rapidly evolving technological threats, ensuring that financial institutions and platforms implement stronger proactive defenses against impersonation and fraud.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.