Very many people are used to receiving financial threats through ordinary infected emails. Today, the preferred method has moved to the screens of personal phones. This cyber attack is called smishing and it delivers the classic scam directly through a short message. These fraudulent messages look extremely official and often claim an administrative problem. In July 2026, institutions raised a huge alarm in the public space. DNSC warned all citizens about such dangerous messages sent anonymously. They clearly impersonated the identity of national platforms or commonly used car services. In the main published example, people were urged to quickly pay an alleged traffic fine of exactly 712 lei. In the same period, similar parallel notifications appeared concerning payments for well-known parking services. The attackers rely exclusively on speed of reaction and fear of the consequences of the law.
Why do criminals ask for small sums and not hundreds of thousands of euros?
Human psychology is the first major vulnerability in the equation of online fraud. According to reports publicly analysed for the first half of the year, smishing accounts for 13% of events. The real number is probably much higher because small losses are never reported. When someone loses a few hundred lei they simply prefer to keep quiet. Attackers know that a small debt raises no logical questions or suspicions at all. A supposed unpaid parking warning is paid instantly and irritably right on the phone. The criminal in no way wants to earn those few measly lei sent. He desperately wants to fully capture the valid numbers from the face of the bank card. Once they enter that hidden database, the data will authorize further massive frauds later. This strategy produces perfect results in record time and prevents the authorities from intervening.
How do you quickly recognize the technical structure behind the fraudulent message?
Understanding the basic elements of the fraud will certainly help you recognize it easily in the field. The first thing that gives away the attempt is always the pretext invoked by the text received. It applies great artificial pressure and involves the payment of a supposed tax or minimal debt. The consequence of ignoring the warning often promises blocked accounts, impounded cars or major delays to parcels. The second fake element is evident in the very name of the one making the digital call. The sender can easily imitate official words, so the initial appearance is not a real guarantee. But the link in the text sends the victim to a portal that merely draws the familiar official interface. The official warning stresses that a clean, modern web page does not guarantee legal authenticity. The actual address of the page often differs through a dubious domain or a simple incorrect suffix. There it even asks for a unique security code that the attacker's system needs for interception.
| Element found in the message text | The correct check that saves you from the threat |
|---|---|
| A link with an error in the official address (e.g.: ghiseul-plati.online). | Always open the verified app or manually type the exact domain in the browser (e.g.: ghiseul.ro). |
| An urgent traffic fine of 712 lei, even though you have not driven recently. | Nobody is fined "in absentia" without prior official platforms or written records. |
| Requests to re-enter the CVC code (the code on the back) repeatedly. | Legitimate forms ask for the details once and confirm the payment; repeated errors signal fraud. |
What impact does employee carelessness have on your company?
A simple SMS arriving on an employee's personal phone quickly becomes a real corporate nightmare. Company managers often ignore this phenomenon, considering it an ordinary problem limited strictly to the personal level. If a person uses the company card to pay the alleged fine, the attacker gets everything. The careless employee freely hands over company data, and the subsequent transactions hit the company's official budget. Moreover, fraudulent pages often ask for the quick creation of new profiles with various associated passwords. People automatically tend to use the same password as the one for their office email. This behaviour instantly puts the official corporate address right into an intruder's pocket. The hacker enters the official mailbox unhindered and launches further malicious acts. From the trenches, technical experts know for sure that the damage is seen only at the end of the process. After the page gives a small error, the money starts to quietly disappear in complete silence.
What solutions do you have this week to raise the level of prevention?
Absolute control must always be installed on the strictly decision-making side of the human factor in the office. Immediately tell colleagues clearly that real platforms are opened from outside any promotional messages. Make a double-verification system (MFA) mandatory when entering the internal mail portal. Cards used for payments outside the institution must be protected and framed by very low limits. These payments must always send a separate notification to the person heading the organisation's finances. Above applications and procedures, it is essential to develop a team spirit without any fear of reprisals. An employee who has mistakenly entered the company's accounts on a fake portal must report it urgently. The time recovered this way definitively decides the fate of the money in the affected account and the success of the freezing operation. Request a professional check using our complete IT audit for companies service, small or large. By using our official contact section you will promptly find a team of engineers specialized in protection. We successfully install dedicated cybersecurity solutions that include both technical measures and employee training.