Abstract
“Your package is waiting. Pay CHF 1.99 in customs fees.” Messages like these seem harmless – and that’s exactly what makes them dangerous. Phishing SMS, also known as smishing, lure you to fake websites to steal passwords, credit card details or other personal information. Here, you’ll learn how to recognise fake SMS, what’s behind package and customs scams, and where you can report phishing SMS in Switzerland. Plus: a new scam where your phone suddenly rings after you receive an SMS.
Summary
Smishing is a combination of “SMS” and “phishing”. Scammers send messages that look like notifications from a bank, parcel delivery service or public authority.
The goal: to get you to click a link and enter personal information, such as a password or your credit card details.
It doesn’t take complicated hacker magic. Often, a believable story is enough: A package is stuck. A payment is missing. Your account needs to be confirmed. Add a little time pressure – and suddenly your finger is faster than your critical eye.
Not every unusual message is automatically a scam. However, you should be aware of these warning signs:
Warning sign | Example |
|---|---|
Time pressure | «Payment required today» |
Unexpected request | «Confirm your credit card details» |
Suspicious link | The web address does not match the company. |
Small fee | CHF 1.99 for customs, postage or delivery |
Threat | «Your package will be returned» |
Most importantly: A familiar sender name does not prove that the SMS is genuine, because sender information can be spoofed. A phishing SMS can therefore even appear in the same message thread as genuine messages.
A better check: Open the company’s official app or website yourself. If there is no corresponding notification there, you have even more reason not to trust the SMS.
Because the story applies to so many people. If you shop online, you regularly wait for packages. Scammers therefore don’t even need to know whether you’re actually expecting a delivery.
In a typical customs SMS scam, you’re asked to pay a small fee for customs, postage or redelivery. The amount seems harmless. But what the scammers are really after is your data.
Swiss Post also warns about fake messages concerning held packages, customs fees and shipment tracking.
So remember one simple rule: Check your package status via the official website or app – not via the link in the SMS.
You haven’t opened the link
Don’t click it and don’t reply. Check the message through an official channel. You can then report and delete it.
You’ve opened the link
Close the website. Don’t download anything or grant any permissions. If you haven’t entered any information, the risk is significantly lower.
Want to know what role a firewall plays in protecting your devices? The yallo guide
You’ve entered a password or credit card details
Now, speed matters. Change the affected password immediately. If you use the same password for other services, change it there too. Enable two-factor authentication if possible.
If you’ve entered credit card details, contact your card provider or bank directly.
A VPN can’t protect you if you enter your credit card number on a fraudulent website, but it can help secure your internet connection in other situations. The yallo guide
Where can you report a phishing SMS in Switzerland?
You can report suspicious messages to the Federal Office for Cybersecurity (FOCS). Phishing websites can also be submitted via antiphishing.ch.
If you have already suffered financial loss, FOCS recommends filing a police report.
What is double phishing?
This is where the scam becomes particularly sophisticated, because the attack doesn’t end with the fake package website.
First, you might enter personal information on the fake website. Later, you receive a phone call. The caller may claim to work for a financial institution and already knows information about you. It’s precisely this prior knowledge that makes the call seem credible.
The most important lesson: One phishing attempt can be followed by another.
If you receive an unexpected call after a suspicious SMS, don’t share passwords or security codes. End the call and contact the company yourself using its official phone number.
That supposed CHF 1.99 customs fee? It may never have been the real target.
Staying safe on your mobile therefore means more than just having a smartphone and enough data. It also means knowing how to deal with suspicious messages. If you’d like to find out more about suitable plans, you can find the latest offers on the
Can an SMS from a familiar sender still be fake?
Yes. Sender information can be manipulated. So don’t rely on the displayed sender name alone.
How do I check a suspicious package SMS?
Open the package delivery service’s official website or app yourself and check your shipment there. Don’t use the link in the SMS.
Where can I report a phishing SMS in Switzerland?
You can report phishing to FOCS. You can also submit suspicious phishing websites via antiphishing.ch.
What should I do if I’ve already entered my credit card details?
Contact your card provider or bank immediately. If you also entered a password, change it straight away and enable two-factor authentication.
19.12.2025 | Reading time: 7 minutes
Your smartphone is your daily companion: messages, photos, banking, emails, social media, maybe even health data. That’s exactly why it’s interesting for hackers too. Sometimes, all it takes is an unwary tap, an unsafe download or an open Wi-Fi network – and attackers have found a way in. The good news: with a few simple habits, you can protect your phone well against hackers, without having to deal with technical details every day. But which settings really matter, and how can you stay safer in everyday life?
18.09.2025 | Reading time: 7 minutes
Whether it’s shopping, e-banking or streaming, the internet is part of your daily life. Every action leaves traces, and many underestimate how quickly personal data can be misused. With the right settings, tools and habits, you’ll browse more safely, protect your privacy, and significantly reduce the risk of cybercrime.
