Fake SMS traffic‑fine notices: how to protect yourself from smishing

Citizens are being warned to treat unexpected SMS or iMessage notices about unpaid traffic fines with extra caution: some messages are part of fraud campaigns that try to collect personal and banking data through links that lead to fake payment pages.

Authorities have identified messages that create a false sense of urgency—claiming a fine is unpaid, that a payment deadline is about to expire, or offering a reduced amount if the recipient pays immediately. In some cases scammers even offer a purported "50 percent" discount to push people into clicking the link.

How the scam works and what to watch for

When recipients follow the link, they can be redirected to counterfeit websites designed to look like official portals or e‑government services. Those pages often ask for name, phone number and sensitive payment details — in particular the card number, expiry date and security code — which can then be used for unauthorized transactions.

Specialists label this method "smishing," a phishing variant carried out via text messages. Unlike traditional email scams, smishing targets users directly on their mobile phones and exploits the greater trust many people place in SMS notifications from institutions.

If you receive a message about an alleged unpaid traffic fine, the safest step is to verify the claim through the responsible authority or the official e‑services portal uslugi.gov.mk rather than using the link in the text. Do not enter bank card details on pages reached via unverified SMS links and never share single‑use confirmation codes.

Those who have already entered card information should contact their bank immediately to request a block or protection on the card and to review recent transactions. Report any unauthorized payments to your bank and the competent authorities and keep the original message, the sender number and the website address — these details help investigators.

MKD‑CIRT issued a warning about the spread of fake electronic messages in January 2026, and experts stress the same tactics can reappear in new campaigns. It is important to note this is a previously published security notice, not a confirmation that a new campaign was discovered on November 9.

Photo: Pixels