Summary

A phishing campaign is fraudulently using the address tech@datainnovation.io as the sender or reply-to address, impersonating Société Générale. The recipients are private individuals in France.

This email is not from us, and it is not from Société Générale either. Data Innovation does not send any banking communications and has no connection with Société Générale.

How to recognise this fraudulent email

• Subject: “Verification in progress”, “Important information about your account” or similar
• Visible sender: “SG – Customer service” <tech@datainnovation.io>
• The email quotes a suspicious amount (observed example: 287,99 €) and contains your name, address, phone number and date of birth
• It asks you to call back a number at 01 89 62 92 40. This number is controlled by the scammers.
• The number is sometimes written with Cyrillic characters (Р instead of O) to bypass automated filters: Р1.89.62.92.4Р, O1.89.62.92.4O, 01 89 62 92 40, 01.89.62.92.40

What to do if you have received this email

1. Do not call the number. The scammers will impersonate your bank to extract your codes or a bank transfer.
2. Do not click on any link and do not reply to the sender.
3. If you are a Société Générale customer and have doubts about your account, call using the number on the back of your card or 3933.
4. Forward the email to securite@societegenerale.fr (official SG service for impersonation).
5. Report it on www.signal-spam.fr.
6. For an official report to the authorities: PHAROS (internet-signalement.gouv.fr).

If you have already called the number or shared information

• Immediately block your bank card via your app or customer area.
• Call Info Escroqueries: 0 805 805 817 (call and service free, Monday-Friday 9am-6:30pm).
• File a complaint online via masecurite.interieur.gouv.fr or at your local police station.
• If your personal data is exposed (name, address, phone, date of birth), expect further attempts by SMS or phone. Register your number on Bloctel.

What Data Innovation has done

• Strengthened our DMARC policy to the strictest level (p=reject).
• Restricted sending permissions on the tech@datainnovation.io alias.
• Reported to Société Générale, Signal Spam, Phishing Initiative, PHAROS, and identified infrastructure providers.
• Active monitoring of similar domains (typosquatting and homoglyphs).
• Published this alert to help any targeted person quickly identify the fraud.

Who is Data Innovation

Data Innovation SL is a CRM, data and AI consultancy based in Barcelona. We work with companies on their email communication infrastructure. We do not send any communications to private individuals in France, and we have no commercial relationship with Société Générale.

To contact us regarding this alert: security@datainnovation.io.

⚠️ Active phishing site — DO NOT VISIT

DANGER: Do not visit https://skam-vp4h7fb1.henla.workers.dev
This website steals credit card information. It impersonates Disney+ billing.

Fraudulent numbers to avoid

This number circulates in multiple formats to bypass spam filters:

• 01 89 62 92 40
• О1.89.62.92.4О (with Cyrillic characters)
• +33 1 89 62 92 40
• 0033 1 89 62 92 40

All variants route to the same fraudsters.

Other campaigns from the same fraud operation

This same fraud operation also sends emails impersonating:

• ANTAI (French parking and traffic fines)
• DGT (Spanish traffic fines)
• Disney+ billing issues
• Société Générale bank alerts

If you received any of these with the same number, it is the same scam.

Already called 01 89 62 92 40?

1. Contact your bank immediately to freeze your cards.
2. Change all your banking and email passwords.
3. File a report: Action Fraud (UK), IC3 (USA), or your national cybercrime authority. In France: PHAROS.
4. Call Info Escroqueries (France): 0 805 805 817 (free, Mon-Fri 9am-6:30pm).
5. Register on Bloctel to reduce future fraud calls.