Is this text from a brand real?

Purpose

How to tell a real text message from Correos, the DGT, the Agencia Tributaria, the Seguridad Social, BBVA, Santander, CaixaBank, DHL, SEUR or Amazon from a fake: their official web addresses and what the fakes look like.

Requirements

Anyone can read these guides, no account needed. Some tools require Pro, as indicated in each guide.

The brands that scammers impersonate by SMS in Spain. Pick one to see its official web addresses, what the fake messages look like and what to do.

How to use it

1. 1

   The brands that scammers impersonate by SMS in Spain. Pick one to see its official web addresses, what the fake messages look like and what to do.

2. 2

   Look at the link, not the sender: a real message only links to the brand’s own domain. Don’t trust any other address, including a shortened link.

3. 3

   Be wary of urgency and small payments: a held parcel, a pending fine, a blocked account or a refund that expires today are the usual hooks.

4. 4

   Never use the link to check: open the brand’s app or type its address yourself.

Synthetic example

https://delivery.example/notice

Interpret the result

Brands impersonated in Spain. Each page lists the official domains in NoCall’s SMS rules, the same ones our SMS checker uses.

Limitations

Brands impersonated in Spain. Each page lists the official domains in NoCall’s SMS rules, the same ones our SMS checker uses.

Troubleshooting

The security check or API connection did not respond in time. Try again in a few seconds.

Use with the API

Whether a link really belongs to the Spanish brand it claims (official, unconfirmed, lookalike, shortener, other). sightings counts every eligible community campaign for the brand, not only the public top 10. ES only.

Send the JSON body to the tool's own route, or to POST /v2/tools with the tool field added. Both routes return the same result.

POST https://api.nocall.io/v2/sms-brand
POST https://api.nocall.io/v2/tools  {"tool":"sms-brand","brand":"correos","link":"https://correos-envio.example.invalid/pago","country":"ES"}

REQUEST_ID="$(uuidgen)" && [ -n "$REQUEST_ID" ] &&
curl --request POST 'https://api.nocall.io/v2/sms-brand' \
  --header "Authorization: Bearer $NOCALL_API_KEY" \
  --header 'Content-Type: application/json' \
  --header "Idempotency-Key: $REQUEST_ID" \
  --data '{"brand":"correos","link":"https://correos-envio.example.invalid/pago","country":"ES"}'

import json
import os
import urllib.request
import uuid

api_key = os.environ.get('NOCALL_API_KEY')
if not api_key:
    raise SystemExit('Set NOCALL_API_KEY')

request = urllib.request.Request(
    'https://api.nocall.io/v2/sms-brand',
    method='POST',
    data=json.dumps({'brand': 'correos', 'link': 'https://correos-envio.example.invalid/pago', 'country': 'ES'}).encode(),
    headers={
        'Authorization': 'Bearer ' + api_key,
        'Content-Type': 'application/json',
        'Idempotency-Key': str(uuid.uuid4()),
    },
)
with urllib.request.urlopen(request, timeout=30) as response:
    result = json.load(response)
print(result['data']['result'], result['meta']['unitsCharged'])

import { randomUUID } from 'node:crypto';

const requestId = randomUUID();
const apiKey = process.env.NOCALL_API_KEY;
if (!apiKey) throw new Error('Set NOCALL_API_KEY');

const response = await fetch('https://api.nocall.io/v2/sms-brand', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer ' + apiKey,
    'Content-Type': 'application/json',
    'Idempotency-Key': requestId,
  },
  body: JSON.stringify({ brand: 'correos', link: 'https://correos-envio.example.invalid/pago', country: 'ES' }),
});
const result = await response.json();
if (!response.ok) throw new Error(result.error?.code ?? 'request_failed');
console.log(result.data.result, result.meta.unitsCharged);

{
  "data": {
    "tool": "sms-brand",
    "result": {
      "verdict": "lookalike",
      "host": "correos-envio.example.invalid",
      "brand": {
        "slug": "correos",
        "name": "Correos",
        "category": "delivery"
      },
      "officialDomains": [
        "correos.es",
        "correos.com",
        "correosexpress.com"
      ],
      "sightings": 0
    }
  },
  "meta": {
    "requestId": "req_example",
    "unitsCharged": 1,
    "usage": {
      "periodStart": "2026-10-01",
      "unitLimit": 20,
      "unitsUsed": 3,
      "unitsRemaining": 17
    }
  }
}

• API reference ↗

Frequently asked questions

Related guides

• Check if a text message is a scam
• Check a link