What happened
Security researcher @catnap707 posted on X on 13 November 2026, tagged #偽サイト (fake site) and #警視庁 (Tokyo Metropolitan Police Department), listing the links jp[.]kswg[.]net and jp[.]kswl[.]net and the IP addresses 180.178.61.26 through 180.178.61.30 (AS963) as fake Tokyo Metropolitan Police sites. In a follow-up post the researcher listed pages on the fake site imitating the police site's top page, an 'online administrative procedures' page and an 'online consultation' (/meet) page. These are not official police domains, and the Tokyo Metropolitan Police Department is impersonated. Real police in Japan do not ask people to handle cases or payments through links sent by phone, SMS or messaging apps. Source: https://x.com/catnap707/status/2121143960341295531
How the scam works
Messages that claim to come from the police or another government service, especially about a fine, a refund or an investigation, are a common way to steal card details, identity documents or a login. Real agencies do not demand immediate payment by a link in a text, or ask you to type a driving licence and a card number on a look-alike page. Go to the official website or app you already use, or call a number from a statement or a government directory, not from the message. If you entered card or document details, contact your bank and report the texts to your national CERT or police cyber unit.
If a message, a page or a caller creates urgency about money, a login or a legal threat, pause and check the claim through a contact method you already trust. Keep screenshots, reference numbers and the exact addresses or phone numbers you were given, and tell your bank early if money has already left the account. Official brands and authorised firms named in a lure are not involved unless a primary source says otherwise.
Source
Source: https://x.com/catnap707/status/2121143960341295531
