Fraudulent SMS Messages Impersonate Andorran Police Following CASS Cyberattack

Several residents of Andorra received fraudulent SMS messages impersonating the Andorran Police on Friday, November 13, containing suspicious links that could be used to steal victims' personal or banking information.

The messages appeared one day after a cyberattack affecting the Andorran Social Security Fund (CASS) became public and the Andorran National Cybersecurity Agency (ANC-AD) warned about the potential risk of digital fraud.

The timing has raised concerns, particularly because the cybersecurity agency had already warned on Thursday that information exposed during the security incident could potentially be exploited in future phishing and impersonation campaigns.

However, there is currently no evidence linking Friday's fraudulent messages to the CASS cyberattack. In fact, the Andorran Police had already issued a warning on November 10 about a separate SMS scam impersonating the force, two days before the security incident became public.

Scammers Impersonate Andorran Police to Steal Personal Information

The fraudulent text messages use the identity of the Andorran Police to appear trustworthy and encourage recipients to click on external links.

This type of cybercrime, known as smishing, involves sending deceptive text messages that appear to originate from official institutions, with the aim of obtaining confidential personal or financial information.

Earlier this week, the Andorran Police identified a fraudulent campaign in which scammers informed recipients of a supposed outstanding fine and offered a discount if payment was made immediately through a provided link.

In response, the police reminded the public that they never notify citizens of fines through SMS messages.

Authorities have advised residents not to click on suspicious links, not to share personal or banking details and to delete fraudulent messages.

Cybersecurity Agency Warned of Potential Fraud Following CASS Breach

The emergence of new fraudulent messages comes at a particularly sensitive time for cybersecurity in Andorra.

On Thursday, CASS disclosed a security incident involving the theft of digital certificates belonging to several authorized filers, which were allegedly used by unauthorized third parties to access the private area of its business portal.

The unauthorized access allowed individuals to view personal information belonging to Social Security affiliates, prompting intervention by the relevant cybersecurity and data protection authorities.

The Andorran National Cybersecurity Agency announced that, together with CSIRT-AD, it was coordinating with national and international authorities to investigate the incident and prevent further consequences.

One of the main concerns raised by the agency was that the exposed information could potentially be used to create more convincing and targeted scams against Andorran residents.

Nevertheless, authorities have not established any connection between the CASS security breach and the fraudulent SMS messages currently circulating.

How to Protect Yourself From Fake Andorran Police Messages

The circulation of new fraudulent messages highlights the importance of remaining cautious when receiving unexpected communications that appear to come from public institutions.

Cybersecurity specialists recommend avoiding suspicious links, questioning messages demanding urgent payments and verifying information directly through official channels.

Scammers frequently exploit the names and identities of government institutions to create a false sense of legitimacy and pressure victims into acting without checking whether the message is genuine.

Anyone who has entered banking information on a suspicious website should contact their bank immediately and report the incident to the Andorran Police.

Residents are also advised never to make payments or disclose sensitive information through unsolicited SMS links, even when the sender appears to be an official authority.