Active phishing attacks on behalf of ENERGO-PRO are spreading on the Internet

ENERGO-PRO received alerts from customers about received fake emails on behalf of the company, which report an error in the accrued amounts due in the electricity invoices and invite to request their refund. The emails indicate unreliable email addresses and a contact phone number. The sharing of personal information is also requested, and this is accompanied by a malicious link misleading about refunds. The energy company serving Northeastern Bulgaria stands apart from these dishonest attempts to harm consumers. Customers need to know that in case of need of a refund, ENERGO-PRO deducts them when issuing the invoice for the next payment. Refunds of money in cash or by bank transfer are only possible after an explicit application has been submitted to the Customer Service Center or by email to service@energo-pro.bg,signed with a qualified electronic signature. The company has no practice of requiring by email confirmation of bank account details or others for this purpose. ENERGO-PRO's current campaigns are available on the company's website.

This phishing attack targets email users across the country and is not limited to ENERGO-PRO customers. Phishing attacks are the sending of fraudulent emails or other electronic messages in order to deceive users in order to obtain their confidential data. Most often, the recipient is prompted to open a previously infected link or file. Once the desired information is returned to them, hackers gain access to passwords and financial services used by those who provided the data, thus being able to steal money, block accounts, abuse accounts.

In case of doubts about the authenticity of correspondence with the described sender ENERGO-PRO and in case of other questions that arise, it is recommended that customers use the contacts on the official website of the company: https://energo-pro.bg/bg/kontakti. ENERGO-PRO does not use email addresses and phone numbers to contact users other than those announced on the site. When confirmation of personal data is required, this is done either through an employee or through the customer's profile on the company's website.