Surely once again you have received the typical message that has put your heart to a thousand of «unpaid fine» or «have just been removed in your account 500 euros.» This type of SMS usually causes the immediate action of the users, by clicking on the first link they see, but that you know that what is going to cause is that they really empty your account.
In 2025, Cybercriminals are using “comprack” and “com-totoll” in the links to camouflage millionaire fraud, according to Spamhaus.
These words are the invisible firm of scams by SMS. The messages simulate being emails, hacienda or your bank, but the link contains traps such as “deliveries-com -track.top” or “tolls-com-toll.cyou”.
If you click, they take you to cloned pages where your bank keys steal. In April 2025, the FBI warned about 60,000 false domains used in these campaigns.
Thus their victims hunt: the perfect deception recipe
- False urgency. Phrases such as «pending payment» or «imminent blocking» seek to scare you to act without thinking.
- Disguised links. They use domains that mimic the real adding «-track» or «-toll» in the end (example: «Correos-com -track.xyz»).
- Mirror pages. Copy the design of banks or public institutions to enter your data.
- Mobile white. Young people between 18-24 are the most vulnerable: they send 67 SMS average daily and trust more on links.
Cases have already been reported in different parts of the world and yes, also in Spain. Bancolombia clients are receiving messages such as: «His insurance was activated for 198,470 dollars. Wasn’t you? Set it here: [enlace-com-track]». When clicking, scammers clon the bank’s website and steal credentials.
The Spanish Civil Guard already dismantled a network that used this technique. The detainees sent fake banks of banks warning of «suspicious session late» and redirected fraudulent pages.
How to protect yourself (and not fall into the trap)
- Check the link with magnifying glass. Words such as «Com-Track», «Com-Toll or Domains» .top «and» .Cyou «are alarm signs.
- Verify the sender. Banks never contact you from generic numbers or spelling errors.
- Ignore the rush. Royal institutions give reasonable deadlines, they do not demand payments «in the next 10 minutes.»
- Use official apps. If they warn you of a fine or package, check directly on the application of mails, your bank or traffic.
If you have fallen into the trap, disconnect the Internet mobile, call your bank to block accounts, and denounce in the police. The speed is vital for you because the scammers empty accounts in less than an hour.
While the authorities chase cybercriminals, your best weapon is, as we always say, distrust any SMS that asks for data or urgent payments. As the FBI says: «No legitimate institution will ask for passwords by message.»
Know How we work in NoticiasVE.
Tags: Traffic fines, advice, scam