Fraudsters send messages from a hidden user. They say that "today" at 12 o'clock it was decided that every citizen of Ukraine can receive financial assistance in connection with Russia's aggression. Instructions on how to get money on the card are allegedly posted at the link.

Fraudsters do not note who exactly made the decision to pay out. There is a separate link for each bank. The design of the pages is similar to real banking sites. However, the link to the pages of different banks has a similar part "ki-pay.me". This is a sign of a private domain and cannot be owned by an official organization. For the most part, such domains are used by graphic designers, web developers, photographers, etc.