Guide: Tutorial on how to recognise fake SMS and messages (smishing) and what to do if you clicked

Step 1: Do not click and do not reply immediately

Scammers rely on haste. Therefore, the first step is to stop.

1. Do not press the link in the message.
2. Do not call the phone number in the message.
3. Do not reply with personal details, codes or confirmations.
4. Do not download or install apps recommended in the message.

A legitimate message can also be checked within a few minutes, via official channels. A message asking for "immediate action" must be treated with caution.

Step 2: Check if the message makes sense to you

Ask yourself a few simple questions:

• Am I expecting a parcel from that company?
• Do I have an account with the bank or institution in the message?
• Have I recently placed an order, made a payment or a request?
• Does my name appear in the message or is it just general text?

If the answer is "no" to these questions, the message has a high chance of being a fraud attempt.

Step 3: Recognise the signs of a suspicious message

Not all fake messages look the same, but they usually have a few common elements:

• Artificial urgency: "you have 30 minutes", "the account will be blocked", "last notice";
• Emotional pressure: fear, threats, debts, fines or prizes;
• Request for sensitive details: card, CVV, password, PIN or code received via SMS;
• Small "redirect" or "delivery" fee paid on an unknown page;
• Unusual link: shortened address or domain that only looks like the official one;
• Unknown sender or number unrelated to the institution;
• Strange text: missing diacritics, awkward translations or unnatural wording.

Step 4: Check the link without opening it

You can notice many things about a link without entering it.

1. Look at the full address of the link (on a computer, hover the cursor over the link without clicking).
2. Identify the real domain: the one located immediately before the first "/" in the address.
3. Check if the domain is exactly the official one of the company or bank.
4. Pay attention to addresses containing the institution's name, but having a different domain at the end.

For example, an address like numele-bancii.ro.alt-domeniu.com does not belong to the bank, but to the domain alt-domeniu.com.

Do not enter details on a page just because it looks identical to the official site. Fake pages can copy the design very well.

Step 5: Check the information from the official source

If you want to know if the message is real, check independently of the message received:

• open the official app of the bank or courier company;
• manually type the website address in the browser;
• use the phone number from your bank card, invoice, or official website;
• check the AWB or order directly in your account.

If there is a real issue, you will also find it in the official app or account.

Step 6: Never transmit codes received via SMS or apps

Authentication codes are personal. Do not tell them or send them to anyone, either by phone or in chat.

• a payment confirmation code;
• the authentication code for the banking app;
• the 6-digit code received from WhatsApp;
• password reset codes;
• the card PIN or CVV.

A real operator does not need these codes to "resolve" an issue of yours.

Step 7: Also watch out for suspicious phone calls

Fraud does not only happen via SMS. Sometimes the message is followed by a call from a person presenting themselves as an employee of the bank, police, or an institution.

• The number displayed on the screen can be spoofed.
• Do not install remote control apps at the request of a caller.
• Do not make "safety" transfers to another account.
• Hang up and call the bank yourself, using the official number.

Remote access apps (for example AnyDesk or TeamViewer) are legitimate, but in the hands of a scammer, they can provide full access to your phone or computer.

Step 8: What to do if you clicked on the link but did not enter any data

1. Close the opened page.
2. Do not download or install anything.
3. If a file was downloaded, do not open it and delete it.
4. Check recently installed apps and uninstall any that you do not recognise.
5. Run a scan with an updated security solution.
6. Monitor important accounts over the coming days.

The mere fact that you opened a link does not automatically mean you have been scammed, but it is good to check the device.

Step 9: What to do if you entered your card or account details

Act as quickly as possible.

1. Call the bank using the official number and ask for the card or access to be blocked.
2. Change the password of the respective account from a trusted device.
3. If you use the same password elsewhere, change it everywhere.
4. Check recent transactions and note any unknown payment.
5. Enable transaction notifications in your banking app.
6. Report the incident to the competent authorities.

Online fraud attempts can be reported to DNSC (National Directorate for Cyber Security), at the number 1911 or via the platform pnrisc.dnsc.ro. If you have lost money, you can also file a complaint with the Romanian Police, keeping screenshots of the message and transactions.

Step 10: What to do if you forwarded a WhatsApp code or installed a suspicious app

If you forwarded the WhatsApp code:

1. Re-register your phone number in the WhatsApp app.
2. Enable Two-step verification (Settings → Account → Two-step verification).
3. Tell your contacts not to reply to messages asking for money or codes.

If you have installed a suspicious or remote access app:

1. Disconnect the device from the internet (Wi-Fi and mobile data).
2. Uninstall the app.
3. Call your bank and check if there has been any activity on your account.
4. Change important passwords from another trusted device.
5. If you are not sure whether your phone or computer is clean, ask for professional help before using it for bank accounts again.

Step 11: Enable extra protections on your phone

A few simple settings can reduce the number of fake messages reaching you:

• enable spam filtering in your messaging app (on Android, in Google Messages, from the spam protection settings);
• on iPhone, you can filter unknown senders from Settings → Messages;
• block and report suspicious numbers;
• enable two-factor authentication for your email, important accounts, and social media;
• keep your operating system and apps up to date.

Menu names and positions may vary depending on the manufacturer, model, and operating system version.