On Facebook, the attackers launched an old fraudulent scheme of alleged "compensation for VAT paid," which now was combined with "assistance from EU countries." This advertisement is promoted on Facebook, using the Ukraine 24 TV channel logo. The message is illustrated by a photo of Volodymyr Zelensky with the "signed decree" captions and "urgent check of cards for payments to each citizen from UAH 9,800" to draw attention to the information in it. The post's description states that "Ukrainians will receive financial assistance from EU countries" and about "VAT refunds for the last three years." To receive "compensation," social network users are offered to go to a third-party site, where they are asked to provide all the card data, they say "for verification." With this card information, attackers will appropriate all the money in the account. A similar scheme was distributed in 2021 when photos of the host of "1 + 1" Alla Mazur were used.