Overview
- The Guardia Civil says its Cibercomandancia traced fraudulent SMS that were injected into a legitimate bank message thread and linked the messages to transfers that removed up to €5,000 from a Madrid customer.
- Investigators report the fraud began when the victim received an alert about an alleged unauthorised transfer with a phone number to call, and a caller posing as a bank security agent persuaded the victim to enter online-banking codes.
- Those one-time codes were then used to move money into accounts controlled by the suspects, and the two women identified by police are now treated as presuntas autoras with investigative files sent to the judicial authority.
- The Guardia Civil urges quick reporting, asking victims to block payment methods, ask banks to reverse suspicious charges, enable stronger authentication and distrust urgent SMS that include links or phone numbers.
- Officials say the case illustrates how smishing works by exploiting real bank threads and one-time codes and note that digital forensics plus bank-tracing are critical tools to link communications to beneficiary accounts and build court cases.