'Your parcel was held due to a missing address, tap here to update.' 'Your account will be frozen, please verify your details.' 'An outstanding debt of NIS 12 remains, pay now to avoid disconnection.' If you have a phone in Israel, you have almost certainly received one of these. It is one of the most common scams, called 'smishing', phishing by SMS. The small sum and simple request are exactly what make it effective.
How does it work? The link leads to a site that looks like the real Israel Post, courier or bank site. There you are asked to fill in details and pay a small amount. What is actually stolen is your full card details, and sometimes a verification code that lets scammers make large charges or add the card to their own digital wallet. The small sum is only the bait.
The signs that give a fake away. First: urgency and pressure, 'within 24 hours', 'or it will be frozen'. Second: a link to an odd address, with a name that looks similar to the real one but is not identical, an unfamiliar ending or a shortened link. Third: a request to pay a small sum for a delivery or debt you did not expect. Fourth: a message from an ordinary phone number rather than an official sender name, though sender names can sometimes be spoofed too. And importantly: fluent Hebrew proves nothing anymore, since scammers now use AI to write flawless messages.
What to do? The simplest rule: do not tap links in text messages asking for payment or detail updates. If you have a parcel on the way, check its status on the official site or app, which you reach yourself. If your bank or card company contacts you, call the number on the back of the card. Official bodies almost never ask for payment via an SMS link for an amount you did not expect.
And if you already tapped and entered details? Call your card company or bank immediately and block the card, even if you do not see a charge yet. If you gave out a verification code, tell them that too. Report it to the National Cyber Directorate's 119 hotline and delete the message. And next time such a message arrives, block the sender and report it as spam on your phone to help filter it for others.
