← Back to threats

Latest Threat: Fake ANTAI "Traffic Fine" Phishing Scam

May 31, 2026

A highly deceptive phishing campaign is targeting motorists by impersonating the French ANTAI (Agence Nationale de Traitement Automatisé des Infractions). The email claims that a traffic fine of 135.00 € remains unpaid and has been increased to 295,99 € due to delays.

The attack uses intense high-pressure tactics, threatening a 12-hour deadline before the fine increases further to 675,99 €, alongside legal consequences like driver's license point deductions or vehicle seizure. This scam is designed to induce panic and force victims into a rapid credential-harvesting trap.


How to spot this phishing attack:


1. Fraudulent Sender Address: The email is sent from a spoofed display name but masks an entirely unrelated academic account: ANTAI <[email protected]>. Legitimate French government notices only originate from official domains like @antai.gouv.fr.


2. Malicious Third-Party Link: The button "RÉGLER MON AMENDE" points to a marketing redirect link (app.clientify.com) before settling on a cloned portal hosted at meaning-antai-traitement.es. No official French government payment infrastructure operates on an external .es (Spain) generic domain.


3. Aggressive Harvesting Workflow: Once inside the fake portal, the system mimics an official "amendes.gouv.fr" page, systematically stripping victims of their identity via a generic personal information form (Name, Address, Date of Birth, Phone Number) before requesting raw credit card information.


If you receive an unexpected fine notification like this, do not click the link. Delete the message immediately. To verify traffic penalties safely, check your status manually through the real amendes.gouv.fr portal using your official tracking identifiers.