Skip to content
StalkPhish
Open Source

Le Dico du Scam

A collaborative glossary of the slang used in French-speaking scam and phishing networks, for threat intelligence, SOC and CERT teams.

Clone the repository

$ git clone https://github.com/StalkPhish/dico-du-scam.git
glossary.md
Alloteur
Personne qui pratique le « Allo », l’arnaque par appel téléphonique.
Scama
Page ou kit complet de phishing.« Vend scama uhq »
Rez
Résultats, données volées.« Rez Mondial Relay dispo »
Fiche / Lookup
Fichier contenant des données personnelles.

Le Dico du Scam documents the slang used in French-speaking scam and phishing ecosystems: Telegram channels and autoshops, Discord servers, cybercriminal forums, Snapchat, TikTok, and the phishing kits themselves. It already covers 92 terms, from Allo to Vouch.

Why a glossary?

Francophone scammer communities have developed their own vocabulary, which evolves quickly and differs from English-language cybercrime terminology. Understanding it is a prerequisite for analysts who follow these actors: reading an ad on a Telegram channel, qualifying a phishing kit, or documenting an investigation.

The terms and their definitions are kept in French, to preserve their exact meaning and make them directly usable by analysts monitoring francophone threat actors.

A few more entries

  • Autoshop: magasin de vente automatique sur Telegram, assuré par un bot, souvent payé en crypto-monnaie.
  • Bin: six à huit premiers chiffres d’une carte bancaire, qui identifient la banque émettrice et le type de carte.
  • Ligne entrante: ligne téléphonique destinée à recevoir les appels des victimes.
  • Mule: personne servant d’intermédiaire à une transaction frauduleuse.
  • Shooter: personne pratiquant l’arnaque en contact direct avec la victime.
  • Vouch: preuve ou témoignage client, censé montrer la « qualité » d’un produit.

Browse the full glossary on GitHub

Contributing

Found a missing term, or a definition to correct or expand?

  1. Fork the repository.
  2. Add or update the term in glossary.md, under the right letter.
  3. One term per pull request, to keep reviews manageable.
  4. Briefly mention where the term was observed: Telegram channel, forum, phishing kit…

Only slang observed in real francophone scam and phishing contexts is accepted: no invented definitions, and no content that facilitates criminal activity.

Other languages

Do you know similar glossaries covering scammer slang in other languages (Spanish, Arabic, Romanian, West African Pidgin…)? Get in touch.

Intended for cybersecurity professionals, and for the curious who lurk these networks without malicious intent. Knowing these terms does not encourage their use.

Related articles

fr· CERT

Une campagne de phishing Netflix, Société Générale, Ameli ou Crit'air pour 10€

Chez Stalkphish nous nous plongeons - depuis plusieurs mois - dans certains réseaux de "scama", de scammers (arnaqueurs), pratiquant des campagnes de phishing parfois assez volumineuses et qui touchent plusieurs marques, enseignes ou services du gouvernement français, comme Ameli/Carte vitale, la vignette Crit'Air, les împots, ainsi que des services privés comme Netflix ou des services bancaires tels que ceux de la Société Générale, la Banque Postale, et bien d'autres.

Phishing campaigns move fast. So should you.

Start with a free search, or talk to us about API access and custom intelligence for your brand.