Lebanon's internal security directorate has alerted the public to a phishing scam using fraudulent SMS messages that impersonate the force and demand payment for traffic violations.
Citizens across Lebanon are receiving text messages purporting to come from the General Directorate of Internal Security Forces, claiming they have incurred traffic violations for exceeding the speed limit. The messages include a violation number, date, reference to current traffic law, and a link requesting payment of a fine. The Internal Security Forces Directorate issued a public statement warning recipients not to click the link or enter any personal or financial information, cautioning that doing so could expose bank accounts and cards to data theft and financial fraud.
According to cybersecurity expert Eli Ghabach, the link directs users to a fake website designed to appear as though it belongs to the Internal Security Forces Directorate. The fraudulent site displays details matching a genuine violation notice, including the date, time, recorded speed, and legal limit, before requesting payment information from the user. Ghabach stated explicitly that the website is counterfeit and has no connection to the Lebanese Internal Security Forces.
Technical investigation by Ghabach traced the website to servers hosted in Singapore and registered to individuals of Indian nationality. The perpetrators have impersonated the Internal Security Forces by copying its name, appearance, and official designations in order to deceive citizens into providing financial information. Ghabach warned the public not to click on any suspicious links received via SMS and advised citizens to verify payment requests only through official channels before responding.
The scam exploits a credible source of authority by mimicking the appearance and language of genuine traffic enforcement communications. Citizens unfamiliar with the procedures for contesting or paying traffic fines may be more likely to follow instructions that appear to come from an official government body. The sophistication of the fake website, which includes realistic violation details, increases the likelihood that recipients will believe the message is legitimate.
Ghabach pledged to work toward shutting down the fraudulent website and halting its operations. He called for swift action by relevant authorities to prevent the targeting of additional users and stressed the importance of reporting suspicious messages to official channels. The threat posed by the scam extends beyond financial loss, as stolen personal data can be sold or used for identity theft and future fraud schemes.
The Internal Security Forces Directorate's public warning represents an effort to reach citizens who may not have heard of the scheme through other means. The statement urged the public to contact official channels rather than responding to unsolicited payment requests via text message. Citizens with genuine traffic violations can verify their status by visiting official Internal Security Forces offices or calling their designated phone lines.
Phishing and impersonation scams targeting government services have become increasingly common in the region as criminal groups exploit the public's trust in official institutions. The use of SMS messages, which appear more authentic than email and carry a sense of urgency, makes this vector particularly effective for fraud. Cybersecurity experts have noted that such scams often target populations less familiar with digital security threats.
The fraudulent scheme preys on the administrative burden of traffic fines, creating a scenario in which citizens might rush to pay without verifying the source. Many residents may not be aware that the Internal Security Forces does not conduct financial transactions through SMS links or unsecured websites. The criminals banking on this knowledge gap have crafted a scheme designed to capture as many victims as possible before being detected.
The warning issued by both the Internal Security Forces and cybersecurity experts represents a necessary public health measure in an environment where digital fraud has proliferated. As citizens become more aware of the scam, fewer new victims are likely to fall prey to it, though those already targeted remain at risk of follow-up fraud schemes. The investigation into the perpetrators' identities and methods may eventually lead to international cooperation to hold them accountable.
