🎣 Smishing: how to spot fake scam texts (PostNord, MitID, bank)
Smishing is phishing by SMS. Learn the 5 warning signs, see the most common fake messages, and exactly what to do if you clicked.
Sidst opdateret: 2026-06-23
What is smishing?
Smishing (SMS + phishing) are fake scam texts where criminals pose as a known company or authority — e.g. PostNord, your bank, SKAT or MitID. The goal is to lure you into clicking a link to a fake website and handing over personal details, card data, or logging in with MitID.
It is the SMS cousin of wangiri and spoofing call scams.
The 5 warning signs
- Asks for personal details. Never send bank account, CPR, card details or codes by SMS.
- Language errors, bad translations or typos.
- Urgency or threats: 'act now', 'your parcel will be returned', 'your account will be blocked'.
- Suspicious link — an address that isn't the sender's official domain.
- Unexpected sender — about something you didn't order or do.
(Source: sikkerdigital.dk)
The most common fake messages right now
- PostNord: 'pay remaining postage/customs on your parcel' with a payment link — almost always a scam. PostNord doesn't send payment links in unexpected texts.
- MitID: 'MitID will stop working unless you update your details.'
- Bank: 'suspicious payment — confirm here' linking to a fake online bank.
- SKAT: 'you are owed a tax refund — enter card details'.
How to protect yourself
- Never click links in unexpected texts. Go to the sender's official site or app yourself.
- Never approve an unknown request in the MitID app — only approve what you started.
- No bank or authority asks unprompted for codes, CPR or card details.
- In doubt about a phone number in the message? Look it up here.
What if you clicked or shared details?
- Contact your bank immediately — they can block cards and accounts and stop transfers.
- Block your card via online bank/app.
- Block your MitID at mitid.dk if you logged in on a fake page.
- Report to the police at politi.dk and keep a screenshot as evidence.
Ofte stillede spørgsmål
Is the PostNord SMS about postage or customs real?
Almost always a scam. PostNord doesn't send payment links in unexpected texts. Don't click — go to postnord.dk or the app yourself.
Do MitID or my bank ever ask for codes by SMS?
No. No bank or public authority asks unprompted for your MitID, codes, CPR or card details.
What if I clicked a scam link or approved with MitID?
Contact your bank immediately and block cards, block your MitID at mitid.dk, report to the police via politi.dk, and keep a screenshot as evidence.
Can I be scammed just by opening the message?
Opening the SMS itself is usually harmless. The danger is clicking the link and entering details on the fake page.
Where do I report a scam SMS?
Report to the police via politi.dk. You can also report scam texts to your telco, and when in doubt call Sikkerdigital / your bank.
Kilder
Flere guides
How to stop spam calls · Wangiri scam: never call back unknown foreign numbers · Sådan blokerer du spam- og fupopkald på iPhone og Android · What does +45 mean? · How does Nummeropslag.dk work? · Danish phone numbers: types and structure · MitID- og banksvindel på telefonen: sådan undgår du fælden · "Hej mor"-svindel og AI-stemmer: sådan tjekker du, om det er ægte · Hvem ringer fra et 70-, 80- eller 90-nummer? (og hvad koster det) · Ukendt dansk nummer ringede — sådan finder du ud af, hvem det er · Spamopkald i Danmark — sådan stopper og anmelder du dem