Smishing Scams 2026: How to Check Parcel and Fine Texts

조회수

0

창가에서 손에 쥔 빈 화면의 스마트폰

This is an English version of our Korean article, based on public information as of October 4, 2026. Please check the official sources below for the latest details.

Read the original Korean article

Summary

  • On September 20, the Financial Services Commission (금융위원회) and the Financial Supervisory Service (금융감독원) warned about texts that claim a parcel address error or unpaid fines and penalties in order to get people to install malicious apps.
  • Trading leftover foreign currency from overseas trips person to person can get you caught up in voice phishing money laundering, and scams posing as compensation for leaked personal data also call for caution.
  • Don’t tap the link in a suspicious text. Check directly through the official app or main phone number, or check the text on the Boho Nara (보호나라) channel on KakaoTalk.
  • If you have already installed an app, turn the phone off or switch to airplane mode and go to your mobile carrier for help. For consultations call 1394, and in an emergency call 112.

〰

Which Texts Are Going Around Right Now?

On September 20, the Financial Services Commission and the Financial Supervisory Service released voice phishing precautions for the period around the Chuseok holiday. Taking advantage of the surge in parcel volume during the holiday, texts about parcel address errors, undeliverable parcels, and unpaid fines and penalties have reportedly been circulating.

These texts contain internet addresses (URLs) from unclear sources. Tapping them can lead to a malicious app being installed, so the financial authorities urged people never to tap these links.

On September 17, the Broadcasting, Media and Communications Commission (방송미디어통신위원회) also said it was concerned about bait texts such as “A gift has arrived, enter your delivery information” and “Chuseok event.” It reportedly asked mobile carriers and handset makers to strengthen intelligent spam filtering.

The Chuseok holiday is over, but impersonating parcels or fines is bait that can be used at any time of year. It is safer to assume you will keep receiving the same kinds of texts for a while and be prepared.

A smartphone, a notebook, and a coffee cup placed side by side on a desk
Not related to any specific product (AI-generated image)

〰

What Happens If a Malicious App Gets Installed?

The Broadcasting, Media and Communications Commission explained that once a malicious app is installed, personal and financial information such as your home address and account numbers can leak out. There can also be additional harm, such as your phone being remotely controlled so that large volumes of illegal spam are sent without your knowledge.

The scarier part is the phone call. The financial authorities warned that if a phone is infected with a malicious app, fraudsters can access it at will, so even calls to the police (112) or the Financial Supervisory Service (1332) may be connected to the fraudster.

That is why, if something feels off, it is important to first turn the phone off or switch it to airplane mode instead of immediately making a call from that phone.

〰

Foreign Currency Resale and Data Leak Compensation Scams

Another tactic that stands out in this guidance targets leftover foreign currency after overseas trips. If you trade foreign currency person to person on an online secondhand marketplace, you can unknowingly become involved in laundering voice phishing proceeds.

Fraudsters approach with an exchange rate above the market rate or an extra premium, and say they will pay first, asking for your account number. But that money was sent by another voice phishing victim. The moment the seller’s account becomes a laundering route, it can be designated a “voice phishing-linked account” and subject to payment suspension or limits on electronic financial transactions.

The financial authorities said you should treat it as fraud without exception if the other party offers a price above the market rate, tries to pay before receiving the foreign currency, or if the depositor’s name differs from the other party’s name. It is safer to trade leftover foreign currency through a financial institution.

There are also scams that invoke personal data leaks. Fraudsters use information that has already leaked to approach people, making them anxious by saying “a bank account used for fraud was opened because of a data leak” or “you are implicated in an identity theft crime,” or luring them with “we will pay you compensation for the leak.” Then they get you to tap a link or install an app.

The authorities urged people not to panic even if the other party knows your name or phone number, and to suspect fraud first if you are asked to visit an internet address, install an app, or transfer money.

TacticCommon wordingHow to check
Parcel impersonation textsParcel address error, undeliverable parcel, “gift arrived, enter delivery information”Look it up directly through the courier’s official app or main phone number
Fine and penalty impersonationNotice of unpaid fines or penalties with a linkCheck directly through the agency’s official website, app, or main phone number
Person-to-person foreign currency tradesExchange rate above market rate, “I’ll pay first”Trade leftover foreign currency through a financial institution
Data leak compensation impersonationAccount opened for fraud, identity theft involvement, compensation paymentTreat any request to tap a link or install an app as suspected fraud
Source: Compiled from news coverage of the Financial Services Commission and Financial Supervisory Service voice phishing precautions (Sept. 20, 2026) and the Broadcasting, Media and Communications Commission notice (Sept. 17, 2026)

〰

What to Do, in Order, When You Get a Suspicious Text

Step 1 is “don’t tap.” The Broadcasting, Media and Communications Commission explains that legitimate texts do not ask for unnecessary personal information or account numbers. Be suspicious first of any text that comes with a link and asks you to enter information or install an app.

Step 2 is to check directly through official channels. If you are really curious about a parcel delivery or a fine, the financial authorities’ guidance is to check on the official website, app, or main phone number of the agency or company concerned.

Step 3 is to use the Boho Nara channel. Open the “Boho Nara” (보호나라) channel on KakaoTalk, choose the “Smishing” menu, and enter the content of the text you received to check whether it is legitimate.

Step 4 is to report it. Illegal spam can be reported to the Korea Internet & Security Agency through the illegal spam simple-report app, the simple report function on your mobile phone, or the 118 call center. If you suspect voice phishing or smishing, you can get a consultation and report phone numbers or websites through 1394 (no area code), the main number of the National Police Agency’s integrated response team.

〰

Two Settings Worth Turning On in Advance

The first is a phone setting. The Broadcasting, Media and Communications Commission advised that turning on “Auto Blocker” (보안 위험 자동 차단) in the settings of an Android phone can help prevent harm from installing apps of unknown origin. The financial authorities also explained ways to block installation of apps from unknown sources.

The second is the Financial Transaction Safe-Block Service (금융거래 안심차단서비스). If you sign up, you can block in advance loans, account openings, and open banking activity being carried out without your knowledge. It reportedly can be requested by visiting a branch of the financial institution you currently use, through the Korea Financial Telecommunications and Clearings Institute’s Account Info (어카운트인포) app, or through bank mobile banking.

SituationWhat to do firstContact or tool
You think a malicious app may have been installedTurn the phone off or switch to airplane mode, then go to the nearest mobile carrier store to have the malicious app removed or the phone resetMobile carrier store
Phishing harm has occurred and it is urgentReport immediately112
You suspect voice phishing or smishingGet a consultation on damage; report phone numbers and websites1394 (no area code)
You want to know if a text is legitimateEnter the content of the text you received to check itSmishing menu on the Boho Nara KakaoTalk channel
You received illegal spamReport it, then delete and block itIllegal spam simple-report app, 118
Source: Compiled from news coverage of the Financial Services Commission and Financial Supervisory Service (Sept. 20, 2026), the Broadcasting, Media and Communications Commission (Sept. 17, 2026), and the National Police Agency integrated response team’s 1394 guidance

〰

How This Affects You and What to Do Now

Parcel and fine texts can reach anyone, so settling a few rules ahead of time makes you much safer. Spend just five minutes today going through the list below.

1) Turn on app installation protection settings on your phone, such as “Auto Blocker” (보안 위험 자동 차단).

2) Check whether you have signed up for the Financial Transaction Safe-Block Service, and if not, try applying through mobile banking or the Account Info app.

3) Share the rule of never tapping addresses in texts with your family. It helps to go through the phone settings together with family members, such as parents, who may be more likely to believe a text at face value.

4) Save 112, 1394, and 118 in your phone. When something actually happens, people often can’t recall the numbers.

5) If you have foreign currency left over from an overseas trip, use a financial institution instead of trading person to person.

〰

Frequently Asked Questions

Q. I tapped the link in a text, but nothing seems to have been installed. Am I okay?

The material used for this article does not give a separate standard for judging such cases. If you are worried, it is safer to call 1394 for a consultation or check the text through the Boho Nara channel. If you think an app may have been installed, turn the phone off or switch to airplane mode and go to your mobile carrier.

Q. What is the difference between 1394 and 112?

1394 is the main number of the National Police Agency’s integrated response team, where you can get a consultation on damage and report phone numbers and websites when you suspect voice phishing or smishing. In an urgent situation where phishing harm has already occurred, report to 112 as before.

Q. Where can I apply for the Financial Transaction Safe-Block Service?

The financial authorities explained that you can apply by visiting a branch of the financial institution you currently use directly, through the Korea Financial Telecommunications and Clearings Institute’s Account Info app, or through bank mobile banking. Please check once more with your financial institution for detailed procedures and how to cancel.

Q. What is the safest way to handle leftover foreign currency after a trip?

The financial authorities advised trading leftover foreign currency through a financial institution. If someone on an online secondhand marketplace offers a price above the market rate or says they will pay first, you should suspect fraud.

This article summarizes public information for general information purposes. Product specifications, fees, and policy details may change, so please be sure to check the official announcements. Eligibility for many Korean programs depends on residency or registration status in Korea, so please confirm on the official site.

댓글 남기기

Sean Daily에서 더 알아보기

지금 구독하여 계속 읽고 전체 아카이브에 액세스하세요.

계속 읽기