Falsa DGT — multa de trafico pendiente de pago
Email o SMS suplanta a la DGT (Direccion General de Trafico) y reclama una multa de 60-300 EUR por exceso de velocidad o por no pasar la ITV. Enlace a dgt-multas-pago.es (real: sede.dgt.gob.es). Pide...
Radar de estafas
Smishing: casos recientes de phishing por SMS y QR code
El smishing representó la mayoría de las denuncias de consumidores en 2024-2025. Catalogamos las campañas activas: mensajero falso, alertas bancarias trampa, falsos reembolsos fiscales y QR phishing en parquímetros y restaurantes.
Casos y patrones recientes
Smishing Correos / SEUR / MRW — paquete retenido por aduanas
SMS suplantando a Correos, SEUR, MRW o GLS informa de un paquete retenido en aduanas y pide pagar 1,79-3,29 EUR. El enlace lleva a correos-aduana.es (real: correos.es). Roba datos de tarjeta y codigo...
Smishing Santander / BBVA / CaixaBank — movimiento inusual de 1.840 EUR
SMS suplantando a Banco Santander, BBVA, CaixaBank o Sabadell informa de un 'movimiento inusual' de 750-2.500 EUR y pide pulsar un enlace para 'verificar la operacion'. El dominio es...
Switzerland (NCSC): top reported scams 2026 — phishing, fake-support calls, investment fraud, parcel & 'chief' smishing
Switzerland's National Cyber Security Centre (NCSC) consistently reports phishing, fake bank/Microsoft 'support' calls, investment fraud (fake brokers/crypto), parcel/customs smishing, and...
QR-code phishing ('quishing') is among the fastest-growing threats of 2026 — across email, letters, parking, restaurants
Quishing hides a phishing link inside a QR code, bypassing many link filters and exploiting trust in physical/printed codes. Vectors in 2026: fake 'secure document' or MFA-reset emails, stickers...
Toll & traffic-violation smishing evolves to QR 'quishing' (2026): fake unpaid-toll texts now hide a QR to a card-stealing page
The 'unpaid toll' / 'traffic violation' text scam (E-ZPass, road tolls, parking fines) remains one of the highest-volume smishing campaigns. As people learned to distrust links in texts, 2026...
Caller-ID / number spoofing: ~64% of phone & text fraud, ~EUR 850M/yr, sold as 'spoofing-as-a-service' (Europol)
Europol warns that caller-ID and SMS sender-ID spoofing now underpins roughly 64% of reported phone/text fraud and costs an estimated EUR 850M globally per year, offered by organised networks as...
Ignore calls, texts, and emails threatening to arrest you for missing jury duty
Scammers are impersonating court officials and law enforcement to threaten you with arrest for missing jury duty, pressuring you to pay a fine on the spot. They use phone calls, texts, and emails...
Phishing campaign steals Signal backup recovery keys via fake support messages
Criminals are targeting Signal users with SMS phishing that impersonates Signal Support and tricks victims into handing over their 64-character backup recovery key. Once shared, attackers can...
How are scammers trying to reach you
Scammers reach out through texts, phone calls, social media ads, and direct messages, so anyone with a phone or a social account is a likely target. Their first contact is designed to build trust...
Quishing — malicious QR code on parking meter / menu / mailer
Attacker pastes a sticker QR code over the real one on a city parking meter (Austin, Atlanta, San Antonio), restaurant table, or mails fake 'USPS undelivered parcel' postcards with QR. Scanning leads...
Canada Post / Postes Canada redelivery smishing
SMS impersonating Canada Post / Postes Canada claims a parcel needs C$1.95 redelivery or duties fee, with link to canadapost-redelivery[.]xyz, harvesting card + CVV + Interac credentials. CAFC...
Centrelink benefit scam — fake Services Australia phishing
SMS/email impersonating Services Australia / myGov claims a Centrelink payment is pending and a link is required to verify identity, capturing CRN, Medicare and licence. ACCC ScamWatch: A$5M+ in...
Australia Post smishing — 'redelivery fee' phishing
SMS claims AusPost / StarTrack parcel can't be delivered, needs A$3.20 redelivery fee. Link leads to auspost-redelivery[.]xyz, harvests card + DOB + Medicare/licence. ACCC ScamWatch logged 200,000+...
Royal Mail / Evri 'fee due' smishing (UK)
SMS claims a Royal Mail / Evri / DHL parcel has a £1.99-£3.45 customs or redelivery fee, with link to a fake gov.uk-style page that harvests card + Verified-by-Visa OTP. Action Fraud received...
USPS smishing — 'package held / address required' SMS
SMS from spoofed shortcode claiming USPS package can't be delivered, with link like usps.tracking-redelivery[.]com or usps-services[.]xyz. Landing page harvests address, card details and CVV. USPS...
Charity-collection QR fraud — disaster / war / illness exploitation
After natural disasters, war coverage, or viral GoFundMe stories, scammers print posters with QR codes for fake 'donation' pages (sometimes wallet drainers, sometimes card phishing). Often deployed...
Fake event ticket QR — duplicated / never-issued QRs sold on Telegram
Scammer takes a screenshot of a legitimate QR ticket and resells it to multiple buyers via Telegram / Facebook Marketplace. Only one buyer can enter; the rest are turned away. Or they generate a...
¿Tienes un mensaje, enlace o archivo sospechoso?
Abre Mythos y pégalo. Triaje gratis en segundos. Dossier forense defendible desde CHF 29/mes cuando necesitas un rastro.