Beware of SMISHING: Fraudulent SMS Messages

The National Cyber Security Authority (AKSK) draws citizens’ attention to the increasing number of fraudulent SMS messages, known as smishing, which appear to be official communications from public institutions, banks, or service providers.

These messages aim to manipulate users by creating a sense of urgency, panic, or false trust, directing them to fake websites designed to steal personal and financial data.

To avoid falling victim to these scams, AKSK recommends that citizens exercise increased caution and follow these guidelines:

Do not click on suspicious links
Do not open links sent via SMS, email, or social media from unknown or unverified sources.

Do not share sensitive data
No legitimate institution will request the following information via SMS:

  • Bank card number;
  • CVV / PIN;
  • OTP or verification codes;
  • Passwords or other personal data.

Verify the website address
Beware of fake domains that imitate official websites of institutions or companies. Before entering any data, carefully check the website address and make sure the communication comes from official sources.

Be cautious of urgent messages
Phrases such as “You have an unpaid bill,” “Your account will be blocked,” or “Act immediately” are often used to trigger a quick response and deceive users.

Key signs of smishing

Fraudulent messages often share several common characteristics, such as:

  • Unexpected messages from unknown numbers;
  • Unusual or shortened links;
  • Requests for urgent payments;
  • Requests for personal or banking data;
  • Spelling mistakes or unprofessional wording.

If you have clicked on a suspicious link

If you have opened a suspicious link, you are advised to act immediately:

  • Do not enter any personal or financial data;
  • Close the webpage immediately;
  • Change your account passwords;
  • Contact the relevant institution, bank, or company for verification;
  • Report the case through official channels.

AKSK calls on citizens to remain vigilant toward any suspicious communication and not to act hastily before verifying the source of the message.

Report any suspicious case. Stay alert!

Albania Hosts the International Girls in ICT Day 2026 Event