Reflexes to adopt

Having noted an increase in fraud, which takes the form, in particular, of false notices, the Urssaf informs its users of the correct behavior to be adopted.

These phishing attempts can be made by phone calls, emails, emails or SMS, so check:

• the domains: the domains of the Urssaf are @urssaf.fr ; @info.urssaf.fr ; @enquete.urssaf.fr ; @acoss.fr ;
• the content of the message (spelling errors, message body);
• the veracity of the information concerning you, in particular the Urssaf account number (your surname, first name, address, Siren and Siret is not sufficient since this data is often available on the internet);
• the financial situation of your account and the amounts shown on your online dashboard.
• IBAN and IBAN: if the IBAN account submitted is domiciled abroad and the IBAN does not start with FR then it is an attempt at fraud. We can add that an IBAN starting with FR is not necessarily a guarantee of security;

If any doubt remains, contact directly your Urssaf.

In addition, paying your dues online is the best option to avoid risks.

Do not share any personal data

In order to avoid any scams, you must not communicate your personal details. Whether by phone or email, Urssaf will never ask for your password or bank details. In this case too, using Urssaf messaging is the most secure option.