Is this text from Correos real?
Paste the web address from the message to see whether it belongs to Correos. Below: how Correos really contacts you, what the fakes look like and what to do.
How Correos really contacts you by SMS
Correos’s official domains:
- correos.es
- correos.com
- correosexpress.com
A real Correos message only takes you to these domains or to an address that ends in one of them, such as www.correos.es. Any other address is fake.
What about the sender name?
NoCall’s data doesn’t record which sender name Correos uses, so we don’t list one. It wouldn’t settle the question anyway: a sender name can be faked, and a fake can land in the same conversation as Correos’s real messages.
What the fake Correos messages look like
Fake parcel messages usually say that:
- your parcel is held or couldn’t be delivered;
- you have to pay a small fee (customs, postage or redelivery) to receive it;
- you must confirm or update your address through a link.
And the link usually:
- contains “correos” but is a different domain, such as correos-[word].com or [word]-correos.[ending];
- is shortened (bit.ly, tinyurl.com and similar), so you can’t see where it goes;
- ends in an unusual extension, such as .top, .xyz or .click.
What to do
- Don’t tap the link and don’t reply to the message.
- If you want to check, open the Correos app or type its address yourself.
- If you tapped the link and entered card or bank details, call your bank right away to block them.
- If you entered passwords, change them and turn on two-step verification.
- Report the message and the number so that others are warned.
A name or a number on the screen proves nothing
Scammers can make a text message show a brand’s name or someone else’s number (spoofing), and the fake can even land in the same conversation as the real messages. What gives a fake away is where its link goes.
Other brands
Related tools
Which countries it covers
This page covers text messages that use Correos’s name in Spain. The official domains come from NoCall’s SMS rules.
We compare the address with the official domains in NoCall’s SMS rules. We never open the link.
Frequently asked questions
Does Correos send text messages?
We can’t confirm which messages Correos sends or under which sender name: our data doesn’t record it. What we can confirm is its official domains: correos.es, correos.com, correosexpress.com. A link to any other address doesn’t come from Correos.
The text message came from “Correos”. Is it real?
Not necessarily. A sender name can be faked and can even appear among Correos’s real messages. Look at the link: if it doesn’t go to correos.es, correos.com, correosexpress.com, it’s fake.
I tapped the link. What now?
If you didn’t enter anything, close the page and delete the message. If you entered card or bank details, call your bank right away; if you entered passwords, change them. Then report the message.