Last news in Fakti

Fake phishing emails from NHIF are used to drain bank accounts

The difference is in the address. The fake NHIF page can have any address, but the real one is only with this one – www.nhif.bg

Jun 15, 2025 13:42 495

Fake phishing emails from NHIF are used to drain bank accounts  - 1

Attempted fraud on behalf of the National Health Insurance Fund. The victims received letters in their e-mails, supposedly sent by NHIF, requesting personal data.

The letters claim that the recipient has overpaid his health contributions and the Fund wants to refund him money. To do this, he must send personal data and his bank account.

“Usually these letters contain a link that invites citizens to visit it and the interesting thing in this case is that this link takes them to a page very similar to the design of our health portal“, said Gergana Nenchovska, Director of “Information Technologies“ in NHIF.

The difference is in the address. The fake NHIF page can have any address, but the real one has only this one – www.nhif.bg

„First of all, citizens should be very vigilant, because NHIF does not send emails containing personal data to citizens, as well as calls for reimbursement of health insurance contributions, as well as information about due payments, NHIF does not send such emails“, specified Nenchovska.

The emails, supposedly on behalf of NHIF, are a phishing scam, similar to scams about winning a prize or inheritance. Although many citizens recognize when they are fake emails, several have been deceived by this scheme. The Directorate of Anti-Money Laundering and Fraud Investigation is investigating the case.