🚨 Alert: Sophisticated NIC Scam via WhatsApp Exploiting DRP Identity

The Sri Lanka Computer Emergency Readiness Team (Sri Lanka CERT) has issued an urgent warning regarding a highly convincing phishing scam targeting citizens through WhatsApp. • The Tactic: Fraudsters send messages masquerading as official communications from the Department for Registration of Persons (DRP). They falsely claim recipients must verify their National Identity Card (NIC) data to enhance central database security. • How It Gains Trust: Messages include the victim's actual full name, address, and NIC number, alongside realistic details like biometric requirements, official-looking contact info, and the forged designation of the Commissioner General. • The Hook: Victims are given a sudden appointment and warned that failure to comply will result in a temporary suspension of services linked to their NIC. • The Payload: Panic leads victims to call the provided fraudulent helpline. Scammers then manipulate them into filling out fake forms and disclosing sensitive data, including bank passwords and One-Time Passwords (OTPs), resulting in immediate financial theft. ⚠️ Official Stance: Sri Lanka CERT stresses that the DRP never conducts identity or information verification via WhatsApp. Citizens must independently verify any such requests through official government channels before sharing any personal or financial information.