Scams and Phishing

How to recognise and report online scams.


Pay attention and report ongoing scam

Phishing is a particular type of digital scam aimed at inducing users to provide sensitive and/or confidential data (such as user name, password or other personal information, bank credentials, etc.). This cyber threat consists in the delivery  of messages that look like the forms of communication of a known company , sometimes bearing its name and/or logo, thus misleading users who place their trust in the brand that appears in the communication.

Recently, on the Internet and on social media networks (also sent through instant messaging services), we have noted the presence of communications, messages, posts and sponsored contents that pretend to come from Eni and/or directly from our Chief Executive Officer, Claudio Descalzi. 


These communications do not come neither from Eni nor from its CEO and are addressed to unduly exploit the name of Eni and its top management. Thus, misleading therefore users, who, by clicking  links in the text, fake websites, accounts and social pages created specifically with the purpose of obtaining data through deception.

In these scam messages, reference is often made to Eni’s subsidies  or economic bonuses of some kind, tempting the user to join the initiative promoted and communicate data or even preferences in relation to any questions posed.

On a daily basis, Eni works in close collaboration with the relevant Authorities, against these fraudulent initiatives and unlawful profiling.

Eni strongly recommends its consumers and web users to be wary of such communications and initiatives.

How to recognise phishing and other online scams

  • First, read the text of the messages you receive carefully: attempts to deceive the reader are often poorly written, with spelling mistakes and grammatical errors.
  • If the message you receive contains a link, check well who sent it to you. You can check the correspondence between the link text and the actual address by positioning the cursor above it, without clicking.
    Do not click on the link if you are not sure of the sender.
  • Do not open the attachments. Always check the sender first, especially with attachments with .exe, .zip, .rar, and .xls extensions. They may contain viruses or malware..
  • Do not provide login credentials, passwords, social security numbers or other personal and private information.
  • Be informed. Scam attempts come in different forms: they may be disguised as professional, financial communications, job advertisements, requests for personal assistance and others besides. If you are in doubt about the legitimacy of a communication from Eni, use the official channels.