While seemingly realistic, the message is actually a scam.
This is the “last reminder” before “suspension” of the account. In recent days, thousands of French people have received an alert email, ordering them to “update [ses] personal information now.” According to the writings, this is an “important security requirement to continue to benefit from our services.” With regard to the design of the email, the font and the various elements graphics, doubt is allowed But be careful, it is indeed a trap.
The message is supposed to come from Île-de-France Mobilités, the organization managing Parisian transport and issuing the Pass Navigo, the card allowing you to use the metro, RER, tram or even bus in the capital and surrounding areas.
The problem is that the scammers have gone a little too far in their idea of text, formulating a far-fetched promise: “We would like to remind you that your subscription includes a free month, which will be automatically added to your account once payment information will be updated and confirmed.” If IDFM offered a month of free transportation, the announcement would have been resounding. Let’s be clear, this is not the case, it is a scam.
At the end of the email, a “Access my account” button was added, redirecting to a fake platform. If the link was deactivated before we could learn about the scheme created behind it, it is, most of the time, asked to enter your credit card number. You should definitely not do this because it then falls into the hands of malicious people who will take money from you directly from your account, without you realizing it… except when the debit appears.
To avoid any disappointment and not fall into the nets of criminals, a few elements can easily be checked. First of all, spelling: if a mistake appears in the message, there is a very good chance that it is a fake (here, “Ile de France Mobilité” instead of “Île-de-France Mobilités”).
Also, check the sender’s email address: it appears at the top of the email on computer, while on mobile, you have to click on the sender’s name for the address to appear. If, for IDFM, it is not on the “@iledefrance-mobilites.com” diagram, then it is a scam.
Finally, to be sure and certain, it is best to go and consult the official website of the organization that the criminal is pretending to be and to see if a communication by a channel other than emails has been made. Otherwise, it will again, very often, be a scam.