TLDR
SMS impersonating Correos, SEUR, MRW or GLS notifies of a package held in customs and asks to pay EUR 1.79 3.29. The link leads to correos aduana.es (real: correos.es). Steals card data and CVV code. Indicators: 1) micropayment to appear...
How it works
SMS impersonating Correos, SEUR, MRW or GLS notifies of a package held in customs and asks to pay EUR 1.79 3.29. The link leads to correos aduana.es (real: correos.es). Steals card data and CVV code. Indicators: 1) micropayment to appear...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1IF YOU ARE A VICTIM: block card immediately, report to the Police, report to INCIBE 017, forward SMS to 7726 (operators' anti spam number).
Source
FAQ
Is Smishing Correos / SEUR / MRW — package held by customs a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
IF YOU ARE A VICTIM: block card immediately, report to the Police, report to INCIBE 017, forward SMS to 7726 (operators' anti spam number).
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.