# "Your vehicle has been impounded": the SMS scam that makes you pay fictitious storage fees

> A text message announces that your car has been towed and that storage fees are mounting every day. A breakdown of this scam, the psychological levers behind it, and the reflexes to check the facts in two minutes.

- Source: https://www.envoyer-sms-gratuit.com/en/blog/2026-10-09/arnaque-sms-faux-service-fourriere-vehicule-enleve
- Published: 2026-10-09 (9 October 2026)
- Author: L'équipe Envoyer SMS Gratuit
- Language: en
- Categories: Guide
- Tags: Cybersécurité, SMS, France 2026, Guide, smartphone

---
"NOTICE: your vehicle with registration AB-123-CD has been towed and placed in the impound lot on 07/10. Storage fees: EUR 29.50/day as of today. Pay the release fee to avoid an auction sale: https://mainlevee-fourriere-service.net/av77231"

This one doesn't look like the others. It doesn't promise you a refund, doesn't tell you a parcel is being held, doesn't threaten to close an account. It tells you something far more concrete and far more unsettling: **your car is no longer where you left it**.

And at that precise moment, most people stop reading the message. They get up, go to the window, or think very fast about where they parked the night before. The rational part of the brain is busy elsewhere. The link, meanwhile, waits patiently.

![Hand reaching towards a smartphone with a black screen lying on a wooden desk, next to a keyboard and a calculator](/images/blog/2026-10-09-arnaque-sms-faux-service-fourriere-vehicule-enleve/hero.jpg)

## Why the impound lot is the perfect hunting ground

Vehicle towing has one particular feature that scammers have understood perfectly: **nobody really knows how it works**.

Ask the people around you. Who can explain, off the top of their head:

- who orders a tow (municipal police, national police, gendarmerie, depending on the case);
- how the owner is supposed to be informed — spoiler: not always immediately, and never by text message;
- which impound lot the vehicle has been taken to, given that a single city may have several, often run by private companies under contract;
- the exact amount of the towing charge and the daily storage fees, which vary according to the vehicle category and are capped by official decree;
- after how many days the vehicle can be appraised, then sold or destroyed.

In real life, a tow is usually discovered in the most brutal way possible: **an empty parking space**. The owner then has to call the local police station or municipal police to find out whether the car was towed or stolen. It's a vague, stressful process in which you have to go looking for information rather than receive it.

A text message that arrives with a case number, a registration plate and an amount fills exactly that void. It gives the impression of **shortcutting a painful procedure**. That's the real lever behind the scam: not fear alone, but the relief of finally having clear information.

## The anatomy of the message

Variants circulate, but the structure is remarkably stable.

| Element | What the scammer does | What it triggers |
|---|---|---|
| Registration plate | Sometimes absent, sometimes shown in full | If it's correct, doubt collapses |
| Case number | Made-up alphanumeric reference | Sense of an official procedure |
| Tow date | Previous day or same day | Consistent with recent parking |
| Daily storage fees | Precise amount, down to the cents | Accounting credibility |
| Threat of an auction sale | Short deadline | Urgency, fear of losing the property |
| "Release" link | Domain that mimics a public service | Entry point for data theft |

Two details deserve particular attention.

**The daily amount.** It's always small and precise. €29.50, €24.70, €32.10. A round figure would ring false; cents create the impression of a real official rate. And above all, a daily fee creates mechanical urgency: every day that passes costs money. It's a countdown built into the message, with no need for an explicit threat.

**The plate.** This is the element that turns a mass text message into something that feels personal. In most campaigns the plate is fake or deliberately partial ("vehicle AB-***-CD"), so that the recipient fills in the blanks themselves. But in some cases it's accurate — because it comes from a data leak, a second-hand sales listing, or a form filled in on a toll or vehicle inspection website. We have already devoted an article to hyper-personalised scam texts: the principle is the same here, only more effective.

## What the fake site asks you for (and why)

The link leads to a plain page, often in blue, white and red, with a banner imitating the visual identity of a public service. The journey is designed as a funnel: one piece of information per screen, no way to go back without losing your "request".

1. **Plate and case number.** A pure confirmation step with no technical value whatsoever. Its purpose is to get you to validate that "the case exists".
2. **Identity and address.** Surname, first name, date of birth, postal address. Usable for later identity theft.
3. **Vehicle registration document number.** This is the detail that makes the difference: it gives the rest of the file a credible look if the scammer then calls you on the phone.
4. **Card payment.** The towing and storage fees, sometimes a "release deposit". The amount is deliberately modest: €60 to €150.
5. **3-D Secure validation code.** The real objective. While you think you're paying €89, a much larger transaction is being authorised, or your card is being registered for a subscription.

> A public service will never ask you, by text message, to pay impound fees via a link. Recovering a vehicle from an impound lot requires the **physical presentation** of documents: vehicle registration document, driving licence, insurance certificate, proof of identity. It is not a 100% online process.

## The signals that never lie

### The channel

Police and gendarmerie services do not handle impound releases via commercial text messages with shortened links. Official notifications relating to vehicles arrive by post (a penalty notice from ANTAI, for example) or through the state's authenticated online accounts. A text message containing a payment link is, by its very nature, suspicious.

### The domain name

Read the domain, not the text. French state services use domains ending in **.gouv.fr**. Anything resembling `mainlevee-fourriere-service.net`, `fourriere-paiement-gouv.com` or `service-vehicule-fr.xyz` is fraudulent, even if the page copies the official design perfectly. The word "gouv" placed anywhere in a domain name means nothing; only the end of the domain, just before the first `/`, counts.

### The impossible timeline

A text message announcing a tow "today" while already listing several days of accumulated storage fees contradicts itself. Likewise, a threat of an auction sale within 48 or 72 hours is legally absurd: the real timeframes are far longer, with appraisal and owner notification stages.

### The missing impound lot

A genuine impound case is attached to an **identifiable physical location**: company name, address, opening hours, phone number. Fake text messages stay deliberately vague — "the municipal impound lot", "the towing department" — because a verifiable address is a risk for the scammer.

## The two-minute check

Faced with this text message, there is only one rule: **never verify inside the message**. You verify elsewhere.

1. **Look.** If you can see your parking space, go and see. It's the fastest and most reliable check there is.
2. **Call the police station or municipal police** for the area where you were parked, using a number you found yourself on the town hall website or in the phone directory. They know whether a tow has been ordered, and to which impound lot.
3. **Never call back the number in the text message**, and don't click to "view the case file".
4. **If you genuinely suspect theft**, that calls for filing a police report, not an online payment.
5. **Report the text message to 33700** by forwarding it, then delete it. The scheme, run by French telecom operators with the support of the authorities, makes it possible to have the sending numbers shut down.

For suspicious links, the habit of **hovering without clicking** is easier on a large screen than on mobile. Many readers in fact keep a [smartphone stand](https://www.amazon.co.uk/s?k=support+smartphone+bureau&tag=ds0608-21) on their desk precisely so they can deal with this kind of message calmly, rather than while walking down the street. The gesture seems trivial; it changes everything, because the scam relies on haste.

## Why this scenario is gaining ground in 2026

Three developments explain the rise of this variant.

**The spread of automated systems on the street.** Between video-based ticketing, parking enforcement via automatic plate recognition and low-emission zones, urban drivers receive more and more letters and notifications relating to their vehicle. The administrative background noise has increased, and a fake notice blends right into it.

**Local distribution via SMS Blaster.** Equipment that simulates a mobile phone mast and blankets a radius of a few hundred metres makes it possible to send a message to every phone in a neighbourhood, bypassing operators and their filters. In a street full of parked cars, a "your vehicle has been towed" text message inevitably reaches a majority of car owners. The relevance rate is mechanically high.

**Automotive data leaks.** Classified ad platforms, free-flow toll services, parking apps, insurance comparison sites: databases pairing phone numbers with registration plates exist and circulate. Cybermalveillance.gouv.fr regularly points out that personalisation is the main factor in the effectiveness of smishing.

## If you clicked, or paid

The useful reflex isn't shame, it's speed.

- **Call your bank immediately** to block your card, using the number on the back of the card or in your banking app. The interbank card-blocking service (0 892 705 705) operates 24/7.
- **Dispute the transaction in writing.** The French Monetary and Financial Code provides for the reimbursement of unauthorised transactions; a payment obtained through fraudulent manoeuvres can be disputed, and the fact that you validated a 3-D Secure code while being deceived does not automatically deprive you of your rights.
- **File a police report**, online or at a police station, and keep the text message, the URL and screenshots. Your case with the bank will be much stronger.
- **Change the passwords** of any accounts whose credentials you entered, starting with your email. A **[password manager](https://www.amazon.co.uk/s?k=carnet+gestionnaire+mots+de+passe&tag=ds0608-21)** makes this job doable in a few minutes instead of two hours; for those who prefer paper, a password notebook kept out of sight is still infinitely better than using the same password everywhere.
- **Monitor your statements** for several weeks: repeated small-amount debits are a classic signature.
- **Report the URL** to the Phishing Initiative platform and the text message to 33700.

## Protecting the most exposed drivers

This scenario hits two groups particularly hard.

**Older people**, for whom the car often represents independence itself: the idea of having lost it produces disproportionate panic, and the urge to "sort it out quickly" takes over. The right conversation to have isn't technical but practical: *if you get a message about your car, call me before doing anything at all*. On a [mobile phone with large buttons](https://www.amazon.co.uk/s?k=telephone+portable+senior+grosses+touches&tag=ds0608-21), where web browsing is limited anyway, the instruction "we never click on any link" is even easier to stick to.

**Young drivers and residents of large cities**, who combine paid parking, payment apps, frequent changes of parking spot and, often, genuine uncertainty about exactly where the car was left the night before.

Two very concrete habits reduce the risk:

- **note down or photograph your parking spot** when you park in an unfamiliar neighbourhood — a photo of the street sign is enough;
- **keep your vehicle documents accessible but not in the glovebox**, in a [document holder for car paperwork](https://www.amazon.co.uk/s?k=porte+documents+papiers+voiture&tag=ds0608-21) stored at home, so that you can respond to a genuine procedure without improvising.

And for long journeys, a **[USB car charger](https://www.amazon.co.uk/s?k=chargeur+voiture+USB+rapide&tag=ds0608-21)** avoids the worst situation of all: a phone at 3% battery just when you need to call the municipal police to check a piece of information. Scammers don't create your vulnerabilities, they just wait for them to show up.

## Key takeaways

- No French public service asks for impound fees by text message with a payment link.
- Recovering a vehicle from an impound lot requires the physical presentation of documents, not an online form.
- A precise daily amount and a threat of an auction sale within 48 hours are markers of fraud, not of administrative rigour.
- The only valid check happens outside the message: by going to look, or by calling a number you found yourself.
- Forward the text message to 33700, then delete it.

A car never disappears because of a text message. But a text message can very easily make the money of someone who thought they'd found their car disappear.

{/* image-sources: https://images.pexels.com/photos/13111783/pexels-photo-13111783.jpeg?auto=compress&cs=tinysrgb&dpr=2&h=650&w=940 */}