The Republic of Srpska - Ministry of the Interior


Criminal Police Administration

Unit for High-Tech Crime

Computer fraud


    What is it?

    • Computer fraud involves entering false data, omitting accurate data, or otherwise concealing or falsely representing data, influencing the result of electronic data processing and transmission with the intention of obtaining unlawful financial gain for oneself or others, causing financial damage to another party.
    • In the past period, there has been an increase in this criminal offense in the Republic of Srpska, specifically referring to the execution of so-called BEC scams (Business Email Compromise).
    • The most common modus operandi involves intercepting email correspondence, often of legal entities from the territory of the Republic of Srpska and their business partners abroad, using phishing and spoofing techniques. Unauthorized changes are then made to the recipient's data for financial transactions (e.g., changing a letter in the email address, as in the following examples: olim-sharipov-92@mail.ru / olim-sharip0v-92@mail.ru, or giyos.ruziev@sultontex.uz / giyos.ruziev@sultontex-uz.com).
    • Due to the above, the victim transfers money to the accounts of the perpetrators, previously opened through the internet, usually abroad, using personal documents purchased on the Dark Web.

     

    How to Protect Yourself?

    • Separate private and official email accounts.
    • Have a separate email account for online banking and other electronic payment services (e.g., PayPal and similar) created with a trusted and well-known internet service provider.
    • Change passwords frequently.
    • In email communication, do not use the "reply" option.
    • When corresponding via email, manually enter the email address each time or use one already stored in the address book.
    • In case of any changes to data (e.g., about a bank, bank account, business partner's location, etc.), use additional communication methods (e.g., via phone, mobile applications like Viber, WhatsApp, etc.).
    • Use additional communication methods to verify the execution of financial transactions as quickly as possible.
    • Pay attention to pages where email account details and passwords are entered (verify if it is an official address, check the correct URL address, etc.).
    • Use original and licensed software.
    • Use and regularly update antivirus programs.
    • Use USB drives cautiously.
    • Engage professional individuals for the maintenance of information systems.
    • Regularly create backups of data on separate memory capacities.

     

    What if it Happens?

    • Report to the Ministry of Internal Affairs of the Republic of Srpska as soon as possible.
    • Notify the bank or other financial institution as soon as possible to stop the unwanted financial transaction.
    • Save all email correspondence.
    • Save all financial transaction data.
    • Take a screenshot of the screen.