{"id":721,"date":"2026-10-15T13:42:39","date_gmt":"2026-10-15T13:42:39","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-lazne-sms-poruke-o-povratu-poreza\/"},"modified":"2026-11-04T08:37:39","modified_gmt":"2026-11-04T08:37:39","slug":"upozorenje-lazne-sms-poruke-o-povratu-poreza","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/upozorenja\/upozorenje-lazne-sms-poruke-o-povratu-poreza\/","title":{"rendered":"Upozorenje: La\u017ene SMS poruke o povratu poreza"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Nacionalni CERT upozorava gra\u0111ane na phishing kampanju putem SMS poruka u kojima se napada\u010di predstavljaju kao Porezna uprava i obavje\u0161tavaju primatelje da im je odobren povrat poreza. Cilj kampanje je navesti gra\u0111ane na\u00a0odavanje\u00a0osobnih i financijskih podataka, koji se potom mogu zloupotrijebiti za financijske prijevare.\u00a0<br><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ecb46f15&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ecb46f15\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2026\/10\/image-1.png\" alt=\"\" class=\"wp-image-113745\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">U poruci se nalazi poveznica koja vodi na la\u017enu internetsku stranicu. Od gra\u0111ana se najprije tra\u017ei unos imena i prezimena, IBAN-a, broja mobitela i datuma ro\u0111enja, a zatim i podataka bankovne kartice, uklju\u010duju\u0107i broj kartice, datum isteka i CVC kod.\u00a0<\/p>\n\n\n\n<figure class=\"wp-block-gallery alignwide columns-2 wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\"><ul class=\"blocks-gallery-grid\"><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/10\/slika1.png\" alt=\"\" data-id=\"113748\" data-full-url=\"\/wp-content\/uploads\/2026\/10\/slika1.png\" data-link=\"https:\/\/www.cert.hr\/?attachment_id=113748\" class=\"wp-image-113748\"\/><\/figure><\/li><li class=\"blocks-gallery-item\"><figure><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/10\/slika2-1.png\" alt=\"\" data-id=\"113750\" data-full-url=\"\/wp-content\/uploads\/2026\/10\/slika2-1.png\" data-link=\"https:\/\/www.cert.hr\/?attachment_id=113750\" class=\"wp-image-113750\"\/><\/figure><\/li><\/ul><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Prikupljeni podaci mogu se iskoristiti za poku\u0161aje financijskih prijevara i druge oblike zlouporabe osobnih podataka.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ako primite ovakvu poruku:<\/strong>&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>ne otvarajte poveznicu iz poruke&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>ne unosite osobne podatke ni podatke bankovne kartice&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>obri\u0161ite poruku&nbsp;<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>informacije o povratu poreza provjerite putem slu\u017ebenih kanala Porezne uprave.&nbsp;<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0160to u\u010diniti ako ste unijeli podatke?<\/strong>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ako ste na la\u017enoj stranici unijeli podatke bankovne kartice, odmah kontaktirajte svoju banku i obavijestite je o mogu\u0107oj kra\u0111i podataka. Zatra\u017eite blokiranje kartice ili druge potrebne mjere za\u0161tite, provjerite postoje li sumnjive&nbsp;transakcije na ra\u010dunu te uklju\u010dite obavijesti o transakcijama.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">U slu\u010daju da ste unijeli samo osobne podatke, budite posebno oprezni s naknadnim SMS porukama, telefonskim pozivima i elektroni\u010dkom po\u0161tom. Napada\u010di mogu prikupljene podatke iskoristiti kako bi budu\u0107e poku\u0161aje prijevare u\u010dinili uvjerljivijima.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Nacionalni CERT poziva gra\u0111ane na oprez pri zaprimanju neo\u010dekivanih SMS poruka&nbsp;koje tra\u017ee unos osobnih ili financijskih podataka.<\/strong> Naziv i logotip institucije na internetskoj stranici nisu jamstvo njezine autenti\u010dnosti. Svaki put je potrebno pogledati adresu (URL) stranice na kojoj se nalazite i provjeriti njezinu legitimnost. Ako to ne mo\u017eete u\u010diniti sami, obratite se za pomo\u0107 nekome s vi\u0161e znanja ili direktno Nacionalnom CERT-u.&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Nacionalni CERT upozorava gra\u0111ane na phishing kampanju putem SMS poruka u kojima se napada\u010di predstavljaju kao Porezna uprava i obavje\u0161tavaju primatelje da im je odobren povrat poreza. Cilj kampanje je navesti gra\u0111ane na\u00a0odavanje\u00a0osobnih i financijskih podataka, koji se potom mogu zloupotrijebiti za financijske prijevare.\u00a0 U poruci se nalazi poveznica koja vodi na la\u017enu internetsku stranicu. [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1030,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[23],"tags":[],"tema":[],"class_list":["post-721","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-upozorenja"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=721"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/721\/revisions"}],"predecessor-version":[{"id":1041,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/721\/revisions\/1041"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1030"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=721"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=721"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}