Consumer Advisory Article – Citizens Advice Spain
Scam messages to mobile phones have increased dramatically in recent years. Criminals now target consumers through SMS, WhatsApp, and email using professionally designed messages that look like they come from legitimate companies such as Zara, Correos, Amazon, DHL, and major banks.
Below is a guide to help consumers recognise and protect themselves against the most common phone-based scams.
1. Parcel Delivery Scams (Fake Pickup Messages)
These scams typically arrive by SMS and claim:
“Your parcel is waiting at the pickup point.”
“We attempted delivery.”
“Your order is still at the drop point.”
They often include a fake tracking number and a link that appears to come from a known retailer.
How they work
The consumer receives a text suggesting a parcel is waiting. The link leads to a fake courier or retailer website asking for:
a small fee (e.g., €1.99 delivery confirmation)
personal details
bank card information
Once details are entered, scammers can withdraw larger amounts or steal the victim’s identity.
Key warning signs
Vague language (“drop point / pickup point” with no address).
Odd URLs such as:
secure-zara-eu.shop
verify-courier-delivery.net
Request for payment → couriers do not charge via SMS.
Urgent language (e.g., “final warning,” “last chance”).
Blurry logos or wrong branding.
What to do
Do not click the link.
Delete the message.
If unsure, check the parcel status directly in your retailer’s app or website.
Report the scam to your mobile provider (many allow you to forward messages to a designated number).
2. Bank & Payment Scams
These are among the most dangerous.
Messages may say:
“Unusual activity detected on your account.”
“Your card has been suspended.”
“Click here to verify your identity.”
How they work
The link leads to a fake banking page designed to collect:
online banking login
card number and CVV
verification codes
Criminals then drain accounts within minutes.
Warning signs
Banks never ask for security codes via SMS links.
Bank messages will always address you by name, not “Dear customer.”
3. “Reactivation” Scams (Netflix, Amazon, PayPal, etc.)
Messages claim your subscription or account will be suspended unless you update your payment details.
These are used to obtain card numbers and passwords.
Warning signs
They come from mobile numbers or strange email addresses.
They request immediate payment or login via a link.
4. WhatsApp Impersonation Scams
Typical messages:
“Mum, I’ve lost my phone. I’m using a friend’s. Can you help me pay something urgently?”
Once the victim engages, the scammer sends bank details to receive money.
Warning signs
New numbers claiming to be relatives.
Urgent requests for money.
Caller refuses to voice-call “because the microphone is broken.”
5. Fake Competition / Delivery Compensation Messages
Common examples:
“You have won a voucher from Zara/Primark/Mercadona!”
“You are eligible for a delivery refund.”
These aim to gather personal data or banking details.
6. How Scammers Obtain Your Number
Consumers often assume scammers “know” something personal about them.
In reality, scammers obtain numbers through:
leaked marketing databases
purchased spam lists
random number generation
older sign-ups to websites/apps
recycled phone numbers
They do not know whether you have a parcel waiting, they simply send the same message to thousands of numbers.
7. How to Stay Safe
Golden rule:
If you did not expect the message, do not click the link.
Practical steps:
Never enter card details via a link in an SMS.
Check delivery status directly on the retailer’s website or app.
If unsure, contact the company independently — not through the message.
Block and delete suspicious numbers.
Enable spam protection on your phone.
8. What to Do If You Clicked the Link
If someone accidentally clicked but did not enter details, they are usually safe.
If they entered any information:
Contact the bank immediately
Freeze or replace the card
Change passwords for any affected accounts
Run a security scan on the phone if an app was installed
9. Advice for Vulnerable or Elderly Consumers
Scammers often target older people.
Consumer associations can help by:
Encouraging families to discuss scams openly
Advising them not to respond to unknown numbers
Checking suspicious messages for them
10. Final Consumer Message
Receiving a scam text does not mean a company leaked your data.
It does not mean someone knows your shopping habits or parcel collections, even if you recently purchased.
It is a mass-produced fraud, sent randomly.
Staying cautious, checking independently, and avoiding links is the most effective protection.
.
Example of a scam message, sometimes detected by your mobile as scam.

Receiving any messages on your phone or email. STOP, THINK.