Fake Correos SMS

Real Correos is correos.es. A €1.99 customs SMS is smishing.

How the scam is built

Hurry + fake authority + a channel you do not control (link, PDF, AnyDesk, reverse Bizum, new IBAN). Check on the channel you already trust: the app you installed, the number on the card, a .gob.es address you type yourself.

What to do

• Do not tap the link in the message. Type the site or open the installed app.
• Never read out an SMS code. Never paste a 12-word seed in a chat.
• 017 INCIBE. Report at denuncias.policia.es or a police station.
• hola@safe.madrid — no passwords, no ID photo.

safe.madrid summarises INCIBE, Police, CNMV and AEMPS alerts. It is not those agencies.