Naples – A 24-year-old Neapolitan man transformed SPID into a digital weapon, managing to clone the tax identity of a woman of the same age from Mantua and illegally pocket an Irpef refund of 3.000 euros.
Contents
A case that raises serious questions about the security of the most widespread digital identity system in Italy.
The mechanism of the scam
Document falsification: the scammer, resident in San Giorgio a Cremano, allegedly obtained the victim's personal data through counterfeit documents.
Illegal SPID activation: SPID profile created in the name of the girl without her consent
Tax fraud: a completely falsified 730 form was uploaded to the Revenue Agency's home banking system
Diverting funds: the refund legitimately due to the victim was diverted to accounts controlled by the scammer
The alarm goes off with the delay in the bank transfer
The story emerged when the young woman from Mantua, after having regularly filed her tax return through an accountant, did not receive the promised credit. The complaint filed in Castel Goffredo, in the province of Mantua, triggered an investigation by the Carabinieri, who reconstructed the complex fraudulent mechanism.
Vulnerabilities of the SPID system
The episode highlights disturbing critical issues: namely the possibility of remote activation without physical verification of identity; access to sensitive services (Agenzia delle Entrate, INPS, Health Records) with just one compromised step; difficulty for victims to notice digital identity theft
The 24-year-old was reported for aggravated fraud, impersonation, material forgery
and unauthorized access to a computer system.
The Carabinieri managed to block the money before it was withdrawn, starting the procedure for its return to its rightful owner.
How did he do it? Created fake SPID of a girl from Mantua Uploaded fake 730 to Revenue Agency Diverted the money to her account Discovered by the Carabinieri when the victim did not receive the transfer.
Article published on May 1, 2025 - 10:50 pm
Video Chronicles
It's strange how a person can do such dangerous things without being discovered immediately. The security of SPID must be questioned. Perhaps stricter controls are needed to protect people's digital identities.