Overview

• Spain’s Guardia Civil detailed duplicate‑SIM fraud that cuts a victim’s phone service and intercepts bank verification codes, urging app‑based 2FA, biometrics or hardware keys instead of SMS and caution with unsolicited contacts.
• WhatsApp account takeovers are spreading through fake support calls that solicit the six‑digit verification code, with INCIBE and outlets advising users to activate in‑app two‑step verification and never share codes received by SMS.
• Authorities in Mexico and cybersecurity experts warn about the “estafa del sí,” where recorded affirmations—and increasingly AI‑cloned voices—are repurposed to approve transactions or contracts, urging people to avoid saying “sí” to unknown callers.
• Phishing and smishing campaigns continue to bait victims with urgency and prizes, with Mossos alerting to Lidl‑branded SMS that lead to fake sites for banking data and the FBI cautioning against unsolicited packages carrying QR codes that can install malware.
• Guardia Civil arrested a couple in Castell de Ferro (Granada) accused of befriending a 78‑year‑old woman to obtain her card credentials and withdraw more than €2,800, as police reiterate protections for vulnerable residents.