'Please Attend My Son's Wedding' Phishing Texts Victimize 1,000... "Do Not Click the URL"

[Financial News] Notice of fine for improper food waste separation: hin.***.site/ZKUSOctober 18th, everyone is kindly requested to attend the wedding of Choi ○○'s child ^^ Venue: ***.kr/dgG6GA criminal group based overseas that carried out a smishing scam worth approximately 12 billion KRW from over 1,000 victims has been apprehended by police. The organization sent text messages containing internet addresses (URL links) that installed malicious apps. As smishing messages continue to spread, authorities are urging the public to exercise extreme caution.
The Cyber Investigation Unit of the Seoul Metropolitan Police Agency (SMPA) announced on the 26th that it had arrested 13 members of a phishing ring, including the ringleader, Mr. A (38), detaining four and releasing nine without detention. The suspects were referred to the prosecution by the 7th of this month. Two ringleaders who directed the smishing operations from China have been placed on an International Criminal Police Organization (INTERPOL) Red Notice, and international cooperation is underway.
The group is accused of sending fraudulent messages, such as wedding invitations, funeral notices, and traffic violation alerts, from July 2023 to June 2025. These messages tricked recipients into installing malicious apps, allowing the suspects to steal approximately 12 billion KRW from 1,000 victims.
They deceived victims with smishing texts. Messages included requests like 'Please attend my son's wedding,' 'Your father has passed away,' or 'You must pay a fine for improper waste separation.' Clicking the attached URL would automatically install a malicious app. The group also delayed response by activating Mobile Virtual Network Operator (MVNO) phones or porting numbers. Many victims were unaware that a malicious app had been installed, as their phones showed no immediate signs. According to police, some victims even replied, 'Since the link doesn't work, send me your account number and I'll transfer the money.'
Many victims only realized they had been scammed much later. Some noticed after receiving messages from a different telecom provider or when their phones suddenly became unresponsive. Others sought help at phone shops, not knowing how to recover from the damage.
The criminal group exploited vulnerabilities in remote identity verification systems. Although the issuing agency and license number fonts on forged identification cards differed from originals, there were no issues when verifying with MVNOs. They even succeeded in identity verification using the names of non-existent government agencies.
The group accessed victims' financial accounts and virtual asset exchange accounts to transfer funds, stealing assets. They also expanded the damage by obtaining additional contacts and sending mass smishing texts claiming urgent need for money, according to police.
Police report that middle-aged and older adults were the main targets. Analysis by age group showed that those in their 50s and above accounted for 80–90% of all victims. The largest single victim was Mr. B (61), who lost 485 million KRW from six accounts in 63 separate incidents. Police believe this group is more vulnerable because they are less familiar with digital security.
Police launched an investigation after confirming that account-stealing smishing crimes were occurring. By tracking victims' phones and Closed-Circuit Television (CCTV) footage, they staked out outlets and apprehended suspects in a car, seizing dozens of unlocked phones, forged identification cards, and 45 million KRW in criminal proceeds.
The organization was found to have bases overseas but also operated domestically. The arrested domestic ringleaders traveled between Korea and China, collaborating with Chinese leaders to plan the crimes. Mr. A, a Chinese national and domestic ringleader, was dispatched from China for smishing operations and was arrested after gathering acquaintances and committing crimes for 19 months.
Through this investigation, police solved numerous previously unsolved cases. Several domestic ringleaders and key members of the international organization, which had a base overseas and operated in Korea, were apprehended. More than 900 cases that had been suspended or left unsolved at police stations nationwide were found to be linked to this group.
An SMPA official advised, "Only install apps verified through official app stores, and never click URL links in text messages, even if they appear to be wedding or funeral invitations from acquaintances. Always confirm by phone first and remain vigilant by following security guidelines in daily life."
jyseo@fnnews.com Seo Ji-yoon Reporter