Drivers who rely on parking apps for convenience are now being targeted by a new scam. Scammers are sending messages that mimic communications from the parking service RingGo, falsely claiming users owe money. These messages include a link for payment, but it's all part of a phishing scheme designed to steal personal and financial information.
What the fake message looks like
The message often begins with a notice that reads something like, 'A routine review of open parking charges has identified an amount that is still due.' It then warns users to settle the debt immediately. This is to avoid further financial charges and administrative action. The link provided in the message appears to lead to RingGo's official site. But in reality, it points to a fake version controlled by scammers.
Experts have noted that the phrasing of the message is crafted to induce panic. It frequently mentions either a 'billing review' or a 'routine review,' both of which aim to prompt users to visit the site. The link in the message starts with 'ringgo' but is followed by unrelated and random words. Users are instructed to reply with 'Y' to activate the link. If it doesn't work, they are told to copy and paste it into their browser to make it function.
Criminals use AI to clone real websites
Graham Conway is the managing director of Select Car Leasing. He explains that criminals are using AI to make convincing replicas of legitimate websites. Once users click the link, they are redirected to a counterfeit version of the RingGo site. If users enter their login details or credit card information, scammers can use the data. They can access their accounts and steal money or sell the information to other criminals.
Serpil Hall, a security expert from Datos Insights, explains that this scam is specifically tailored to target iPhone users. Apple’s iMessage service automatically disables links in messages from unknown senders to protect users. However, replying to the message—even with just a single letter—causes iMessage to reclassify the sender as known, activating the link. Scammers are fully aware of this behavior and exploit it intentionally to trick users into clicking the link.
How to spot the scam
There are multiple signs that these messages are fraudulent. For example, the sender’s name may include a typo. Such as 'Customer Servicess' instead of 'Customer Service.' The web address provided in the message does not match the genuine RingGo website. Additionally, the link might initially appear broken. Which is another trick to get users to reply and trigger it.
Apple has taken action by including a 'report spam' button. It is at the bottom of these messages. This signals that they might be fraudulent. Although the messages appear to originate from Morocco. Hall believes the scammers are likely based in other countries. They use low-cost methods to disguise their true location and evade detection.
If you receive one of these scam texts, you should never click the link. Instead, delete the message immediately. To check your actual parking history, log into the official RingGo app or visit the real website. If you have accidentally clicked on the link and entered any of your financial information, report the incident to your bank and change your passwords immediately, starting with your banking ones.