Is this text from Correos, the DGT or your bank real?
The brands that scammers impersonate by SMS in Spain. Pick one to see its official web addresses, what the fake messages look like and what to do.
- CorreosParcel deliveryOfficial domains: correos.es, correos.com, correosexpress.comHow to spot a fake
- DGTTraffic authorityOfficial domains: dgt.es, dgt.gob.esHow to spot a fake
- Agencia TributariaTax agencyOfficial domains: agenciatributaria.gob.es, agenciatributaria.esHow to spot a fake
- Seguridad SocialSocial securityOfficial domains: seg-social.es, seg-social.gob.esHow to spot a fake
- BBVABankOfficial domains: bbva.es, bbva.comHow to spot a fake
- SantanderBankOfficial domains: bancosantander.es, santander.comHow to spot a fake
- CaixaBankBankOfficial domains: caixabank.es, caixabank.comHow to spot a fake
- DHLParcel deliveryOfficial domains: dhl.es, dhl.comHow to spot a fake
- SEURParcel deliveryOfficial domains: seur.comHow to spot a fake
- AmazonOnline shopOfficial domains: amazon.es, amazon.com, amzn.eu, amzn.toHow to spot a fake
Three checks for any text message that uses a brand’s name
- Look at the link, not the sender: a real message only links to the brand’s own domain. Don’t trust any other address, including a shortened link.
- Be wary of urgency and small payments: a held parcel, a pending fine, a blocked account or a refund that expires today are the usual hooks.
- Never use the link to check: open the brand’s app or type its address yourself.
A name or a number on the screen proves nothing
Scammers can make a text message show a brand’s name or someone else’s number (spoofing), and the fake can even land in the same conversation as the real messages. What gives a fake away is where its link goes.
Related tools
Which countries it covers
Brands impersonated in Spain. Each page lists the official domains in NoCall’s SMS rules, the same ones our SMS checker uses.
Frequently asked questions
Why these brands?
They are the brands that NoCall’s SMS campaign detection follows and whose official domains are in our SMS rules. We will add more as we verify their domains.
Do you list the sender names these brands use?
No. Our data doesn’t record which sender name each brand uses, and a sender name can be faked anyway. The official domain is the fact we can verify.
I got a text message from one of these brands. What do I do?
Don’t tap the link. Compare its address with the official domains on that brand’s page, check the whole message with our SMS checker and, if in doubt, contact the brand through its app or website.