<\/p>\n
In recent months, the Bulgarian Ministry of Interior has officially warned about a growing type of fraud targeting individuals who sell goods online. A fake buyer contacts a seller through a classifieds website and expresses interest in purchasing the item. To make the communication convincing, the fraudster claims that payment will be made in advance and that a courier will be used. The criminal then sends a link that visually looks like the website of a real courier company. These pages require the seller to enter personal information, including a name, phone number, and bank card details. Once the data is entered, the criminals gain access to the payment instrument and perform transactions without the knowledge and consent of the cardholder. Police announcements repeatedly emphasize that a bank card is used for making payments, not receiving money. Any request to enter card details \u201cin order to receive funds\u201d is a clear sign of fraud.<\/p>\n
Such conduct has legal consequences. First, the behavior falls under the criminal offense of \u201cfraud\u201d under Article 209 of the Bulgarian Criminal Code, as the perpetrator intentionally deceives the victim to obtain unlawful gain and causes damage. In cases where payment data is collected through fake pages, the actions also fall under Chapter IXa of the Criminal Code, which covers computer systems and data. Article 319a criminalizes unlawful access to an information system, and Article 319b punishes the unlawful use or modification of computer data. When bank card details are entered into a fraudulent website, the perpetrator gains technical access to payment information, which constitutes unlawful access under the Criminal Code.<\/p>\n
The collection of personal and financial data also leads to consequences under data protection legislation. According to the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act, card numbers, names, telephone numbers and other identifiers are personal data. Collecting them without consent, for a fraudulent purpose, is a violation of European and Bulgarian law. Victims are entitled to file a complaint with the Commission for Personal Data Protection and seek compensation.<\/p>\n
Protection against such crimes is possible only with high legal and digital awareness among users. Authorities remind the public that courier companies never require card data in order to send or receive funds. Money is received only via bank transfer. If there is suspicion about the authenticity of a link or website, the seller must contact the courier or their bank. If bank card data were already entered, the bank and police must be notified immediately, as quick action can prevent full withdrawal of funds.<\/p>\n
This type of crime combines classic fraud with a cybercrime element. Bulgarian legislation provides the necessary tools to prosecute offenders, but effective prevention depends on citizens\u2019 awareness and ability to recognize fake links and websites. The legal qualification is clear: there is fraudulent deception, unlawful access to payment data, and illegal processing of personal data. Victims may seek both criminal and civil protection.<\/p>\n
If you or someone you know has faced such a case, it is best to consult a lawyer who specializes in criminal law. This article does not represent legal advice, does not constitute a legal opinion, and is not connected to any specific person or case. Legal assistance requires a consultation with an attorney.<\/p>\n