LEGALAUDIT

Scam Radar

How can you recognize Smishing Santander / BBVA / CaixaBank — unusual transaction of 1,840 EUR?

Published

TLDR

SMS impersonating Banco Santander, BBVA, CaixaBank or Sabadell reports an 'unusual transaction' of 750 2,500 EUR and asks the recipient to click a link to 'verify the operation'. The domain is santander seguridad.es or bbva confirmar.com...

How it works

SMS impersonating Banco Santander, BBVA, CaixaBank or Sabadell reports an 'unusual transaction' of 750 2,500 EUR and asks the recipient to click a link to 'verify the operation'. The domain is santander seguridad.es or bbva confirmar.com...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1SMS impersonating Banco Santander, BBVA, CaixaBank or Sabadell reports an 'unusual transaction' of 750 2,500 EUR and asks the recipient to click a link to 'verify the operation'.
  2. 2Indicators: 1) the bank never sends SMS with links; 2) non official domain; 3) 24h urgency; 4) requests banking login and signature key at the same time.
  3. 3IF YOU ARE A VICTIM: block the card (number on the back of the card), report to Policia Nacional (Grupo de Delitos Telemáticos), report to INCIBE 017.

Source

INCIBE

Source reviewed by Mythos Forensic Team

https://www.incibe.es/node/498014

FAQ

Is Smishing Santander / BBVA / CaixaBank — unusual transaction of 1,840 EUR a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

SMS impersonating Banco Santander, BBVA, CaixaBank or Sabadell reports an 'unusual transaction' of 750 2,500 EUR and asks the recipient to click a link to 'verify the operation'.; Indicators: 1) the bank never sends SMS with links; 2) non official domain; 3) 24h urgency; 4) requests banking login and signature key at the same time.; IF YOU ARE A VICTIM: block the card (number on the back of the card), report to Policia Nacional (Grupo de Delitos Telemáticos), report to INCIBE 017.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.