Russia’s Gosuslugi public services portal has published instructions for users whose accounts have been compromised. These seven steps explain how to regain access and check for misuse.
The Gosuslugi portal has published instructions for users whose accounts have been hacked. To regain access, stay calm and follow these seven steps.
Step 1: regain access to your account
If fraudsters have changed your password, reset it or recover access to your account.
If they have changed your sign-in verification method, you can recover access or sign in another way:
- With a QR code, if you previously installed the Gosuslugi app, signed in with your account and still have access to it.
- With an electronic signature certificate, if you previously enabled this option.
- In the Gosuslugi app, if you previously installed it, signed in with your account and still have access to it.
After recovering access, check that the phone number and email address in your account belong to you.
Step 2: secure your account
Set up a security question and use the other account-protection options.
Step 3: sign out on every device except the one you are using
- Go to your account → Profile → Security.
- In the “System activity” tab, select “Sign out”.
- In the “Mobile apps” tab, sign out of any apps you did not sign in to.
Step 4: check where your account was used
- Go to your account → Profile → Security → System activity.
- Look for suspicious activity to identify organisations where fraudsters may have tried to obtain loans. Pay particular attention to banks and microfinance organisations.
- Contact those organisations. Ask whether applications have been submitted in your name and explain that you did not submit them.
- Check and revoke permissions and consents. Go to your account → Profile → Consents and authorisations:
- In “Permissions”, open each entry and select “Revoke permission”.
- In “Consents”, open each entry and select “Revoke consent”.
- If you revoke a permission you need, you can grant it again later.
Step 5: check applications and notifications
Review submitted applications and notifications covering the period when fraudsters had access to your account.
They commonly request updated electronic employment records, individual personal account information and income certificates (2-NDFL) to learn more about your finances.
Step 6: make sure no loan has been taken out in your name
- Request a list through Gosuslugi of the credit bureaus holding your credit history.
- Order reports from those bureaus. You can do this free of charge twice a year; further reports are chargeable. Each bureau has its own rates and conditions.
- Check which loan applications have been submitted in your name.
- If a loan has been taken out in your name, contact the bank or microfinance organisation urgently and explain that fraudsters submitted the application.
Step 7: report the incident to the police
Do this even if your credit history contains no unfamiliar loan applications. Fraudsters may use your information later if they retain access to your Gosuslugi account. A police report can help demonstrate, for example, that you did not take out a particular loan.
You can submit a report:
- Through the online reception service on the Russian Ministry of Internal Affairs website.
- At your local police station.