APDCAT warns that smishing is already one of the most used fraud techniques in Catalonia

The Catalan Data Protection Authority warns that SMS fishing (smishing) has already become one of the main cybercrime activities in Catalonia, according to published studies. This fraud, which consists of deceiving the victim with false messages via SMS or instant messaging, is increasingly present in the digital world. Also, it's been perfected over the years, so it's getting easier and easier to fall for the trick.

The goal is for the victim to follow a link, to redirect them to a fake website and take control of their device and data. It can also chase the victim to call a phone number or answer the SMS, to use premium phone services, with a rather high additional cost.

Faced with this problem, and coinciding with the start of the European Cybersecurity Month, the APDCAT has prepared new informational material to make citizens aware of the need to be particularly alert to this type of message and avoid being a victim of it fraud

Thus, it presents some common examples of this type of messages, which often pretend to be parcel companies or banking institutions. With the aim of creating confusion and fear in the victim, the messages call for urgent action. That's why it's especially important to stay calm, not follow unknown links and contact the sender by another means.

Likewise, these frauds are increasingly sophisticated and ingenious, and are evolving in order to catch the victim by surprise. For example, there has also been a proliferation of messages impersonating the victim's son or daughter and warning that they have lost their mobile phone and need a deposit via Bizum.

However, in the event of smishing, the APDCAT recommends:

• If credentials have been provided, change the password of the services that may have been affected, be it the bank, personal mail, work account.
• If a fraud app has been installed, it needs to be uninstalled or removed by doing a factory reset.
• If the fraud involves premium SMS subscriptions, you should contact your mobile operator to cancel the subscriptions. Many operators allow you to do this from the customer portal or mobile application.
• If bank details or credit card number have been provided, contact the bank to prevent unauthorized payments and block the card.
• Collect all possible evidence and report the scam to the security forces.

Tips for keeping your data safe

The new informative material that is now published is part of the Safe Data campaign, which the APDCAT has promoted with the aim of raising awareness of the risks associated with the use of new technologies in terms of the loss of personal data .

Thus, he has produced materials around topics such as secure passwords, password management tools, facial recognition, mobile security, multiple authentication, phishing and co-parenting.