Else Beekman
The Guardia Civil has warned the public about a new text message scam. It falsely claims to be an official weather alert from Spain’s national meteorological agency, AEMET. The fraudulent messages trick people into clicking on a fake link, which cybercriminals use to steal personal data or make unauthorised financial transactions.
Scammers send SMS messages that appear to be urgent weather warnings from AEMET. The message contains a link that directs recipients to a fake website, designed to look like an official page. Once there, users may be asked to enter sensitive information, which could be used for identity theft or unauthorised payments.
The Guardia Civil took to social media, particularly X (formerly Twitter), to warn citizens about this scam. They shared a screenshot of the fraudulent SMS and urged people: “Do not click on the link!” AEMET also confirmed the scam, asking the public to report any suspicious messages and avoid interacting with them.
https://x.com/guardiacivil/status/1896976435291808093
The threat of “smishing”
This scam is a classic example of “smishing,” a cybercrime tactic where fraudsters send deceptive SMS messages pretending to be from official organisations or trusted companies. In this case, scammers are exploiting concerns over severe weather, taking advantage of the heavy rains currently affecting Spain. The goal is to create urgency so that people click the link without thinking twice.
If someone clicks the fraudulent link, they may be redirected to a website that mimics AEMET’s official page. Here, they could be asked to enter personal data, such as banking details or passwords. In some cases, clicking the link could install malware on their phone or even activate costly subscriptions without their knowledge.
How to stay safe
To avoid falling victim to this scam, the Guardia Civil recommends the following safety measures:
- Never click on suspicious links – If you receive an unexpected SMS claiming to be from AEMET, ignore and delete it.
- Verify information through official sources – If you’re unsure about a weather alert, check directly on AEMET’s website or through official government channels like the DGT (Traffic Authority) or Protección Civil.
- Do not share personal information on unverified websites – If a website asks for sensitive details after you clicked a link in an SMS, exit immediately.
- Block and report the sender – This helps prevent further fraudulent messages and protects others from falling victim.
Official warnings
AEMET does not send weather alerts via SMS, so any message claiming to be from them should be considered suspicious. Cybercriminals often use “spoofing” techniques to make the sender’s name appear legitimate, making these scams seem even more convincing.
Scammers often target people during times of crisis, such as the heavy rainfall currently affecting Spain, particularly in the Comunidad Valenciana. Authorities are urging everyone to stay alert and report any suspicious messages to the Guardia Civil or Policía Nacional.
What is smishing?
Smishing is a phishing technique where cybercriminals send deceptive text messages to steal personal information. These messages often appear to come from trusted sources, such as banks or government agencies. Consequently, they create a sense of urgency to prompt a quick response.
Victims may be tricked into clicking a link that leads to a fake website or calling a fraudulent phone number. There, they might be asked to enter sensitive information or unknowingly download malware onto their device. This can lead to stolen data, unauthorised access to financial accounts, or even loss of control over the victim’s phone.
To stay safe, always be cautious with unexpected messages, verify the sender before clicking links, and never share personal details unless you initiated contact with a trusted entity. Keeping mobile software updated and using antivirus programs can also help prevent attacks.
Also read: Smishing scam impersonating the Social Security that requests to update the data of your health card