"Hello, we have received your message. An advisor will contact you privately to sort out your account." The reply lands four minutes after you post, beneath the complaint you fired off in exasperation on a major retailer's official account. Correct logo, near-identical name, flawless tone. Except that this account doesn't belong to the brand, and the "advisor" who will write to you within the minute is after one thing only: your phone number, and then your bank details.
This scam holds a special place in the smishing family. In most classic cases, the fraudster fires blind: they send thousands of texts hoping to reach someone who happens to be waiting for a parcel or a fine. Here, it's the opposite. You are the one who publicly announced that you were waiting for something. All the scammer has to do is slip into the conversation.
Why a public complaint is a goldmine
When you write "@Provider I've been waiting three weeks for a refund on the router I sent back, this is unacceptable", you have just handed over several pieces of valuable information free of charge:
- The name of the company involved. The scammer knows exactly which costume to put on.
- The nature of the dispute. Refund, lost parcel, contested bill, unresolved fault: the pretext is already written.
- An amount, sometimes. Many complaints quote a precise sum, which can then be repeated word for word to lend credibility to the fake case file.
- Your emotional state. Someone who is angry, who has already called three times without result, is infinitely more receptive to a contact who finally says "I'll take care of it".
That last point is the real engine of the scam. Scammers aren't selling fear, as in fake fine texts: they're selling relief. It's a classic reversal of social engineering, where the victim feels helped at the precise moment they are being fleeced.
The platforms themselves make targets easy to find. Public mentions of a brand can be viewed by anyone, in real time, with no sophisticated tools. A scammer monitoring mentions of five or six big-name retailers has hundreds of pre-qualified targets every day, all already in a dispute.
The mechanics, step by step
1. The fake account that replies before the real one
Fraudulent accounts mimic official styling: an added underscore, an "official" tacked on, a zero in place of an O, sometimes the very same profile picture lifted as is. Their decisive advantage is speed. A genuine customer service team replies within a few hours, or the next working day. The fake one replies in under five minutes, including on a Sunday evening.
2. The shift to private messages
The fake advisor almost immediately asks to continue "privately, for confidentiality reasons". The argument sounds legitimate, and it genuinely is used by real customer service teams. But here it has another purpose: to move the conversation out of the public arena, where another user, or the brand's real community manager, might raise the alarm.
3. The request for your phone number
This is the pivot of the scam. "So that our department can process your case, please send us your mobile number and the name on the contract." The number changes everything: it allows a move to a more intimate, more credible channel, and above all it enables genuine authentication texts to be triggered on services the scammer will try to log into.
4. The text that looks official
A few minutes later, a text arrives. It may display a sender name resembling the brand's: this is sender spoofing, a falsification that makes it possible to display almost any label. The message contains a link to a "refund form" or a "case validation".
5. The fake form and the very real debit
The form asks for your IBAN "to pay the refund", then your card number "to verify the account holder's identity", and sometimes a €1 transfer "as a bank check". In the most polished variants, a phone call follows, during which you are asked to read out the six-digit code received by text — the code that in fact authorises a payment or adds your card to an unknown phone. We covered this mechanism in detail in our article on verification codes read out over the phone.
No legitimate customer service team in France will ever ask you for your PIN, the six-digit code received by text, or a "verification" transfer. A refund never requires a bank card number: an IBAN is enough, and your provider already has it if you are a customer.
The most exposed sectors
Not all complaints carry the same risk. Scammers favour disputes where a flow of money is plausible and where the customer is already expecting something:
| Type of public complaint | Typical scam scenario |
|---|---|
| Lost or undelivered parcel | "Redelivery fee" of a few euros to be paid |
| Contested provider bill | "Goodwill gesture" requiring an IBAN and a card |
| Cancellation not processed | "Refund of the overpayment" via a fake form |
| Cancelled e-commerce order | "Refund validation" with a code to read out |
| Fault on an appliance under warranty | "Compensation voucher" to be activated by payment |
| Transport, train or flight delay | Fake compensation claim asking for bank details |
This list follows a logic already seen with fake provider refunds: the scammer inserts themselves into a real procedure that is slow and poorly understood.
The warning signs that should stop you
A few simple habits are enough to defeat almost all of these attempts.
Check the account, not the logo. A logo can be copied in three seconds. Look at the account's creation date, the number of posts, the history. A genuine customer service account for a major retailer has thousands of messages behind it; a fake account often has fewer than fifty, all posted in the last few days. Many brands list the exact set of their social accounts on their official website: that is the only reliable source.
Be wary of speed. A reply in under five minutes on a Sunday evening, on a complex case, is not a good sign. It's an anomaly.
Always start again from the official channel. Don't click on any link received by private message or text. Open your provider's app yourself, or type the website address by hand. This is the golden rule: a link that comes to you is always less safe than one you go and find.
Never give out your full bank details. An IBAN on its own cannot be used to debit you without a mandate, but a card number with expiry date and security code can. And a code received by text is as good as a signature.
Watch out for unjustified channel changes. Moving from social media to text, then from text to WhatsApp, then to a call: each hop makes verification harder and takes you further from a written record. That is a red flag in itself.
How to complain without exposing yourself
The instinct to complain publicly is understandable: it often works, because brands hate visible disputes. But you can use it without turning yourself into a target.
- Mention the problem, not the details. "Dispute unresolved for three weeks, please contact me" is enough. Avoid the order number, the exact amount, the contract number, your town, and obviously your phone number in plain sight.
- Never post an unblurred screenshot. Screenshots of bills, delivery notes or parcel tracking contain references the scammer will repeat word for word to convince you. A touchscreen stylus isn't needed: most phones let you blur an area directly in the screenshot editor.
- Favour the official written channel. The website's contact form, your customer account, or registered post for serious disputes. A pad of writing paper and a few window envelopes remain the most solid way to build a case that will hold up, particularly before referring the matter to an ombudsman.
- Keep your own records. If the dispute escalates, a case tracking notebook in which you note dates, contacts and reference numbers will serve you better than a thread of posts. It's also an excellent habit should you later file a complaint.
For disputes with a telecoms provider, there is an official route and it is free: after a written complaint has gone unanswered, the médiateur des communications électroniques can be called upon. Arcep also publishes clear recommendations on unwanted messages and calls, and sets out the reporting channels to use. Neither of them will ever contact you out of the blue by private message.
If you have already replied
Don't panic, but be methodical. The order matters.
- Cut off the conversation. Don't announce anything, don't negotiate, don't make threats: block and report the account on the platform.
- Call your bank immediately if you have given out a card number, an IBAN, or read out a code received by text. Ask for the card to be blocked and the account monitored. The number is on the back of your card or in your banking app — never in the text you received.
- Change the passwords of accounts linked to that phone number, starting with your email. A password manager makes this far easier; failing that, a password notebook kept out of sight is better than a list in your phone's notes.
- Report the text to 33700, the French national reporting service for fraudulent messages. Forward the message, then provide the sender's number when asked. Our guide sets out the complete 33700 reporting process.
- File a complaint and report it on Cybermalveillance.gouv.fr, which offers an online diagnosis and guidance based on your situation. In cases of identity theft or an unauthorised debit, filing a complaint is essential for what comes next, particularly to obtain a refund from your bank.
Protecting a more vulnerable relative
This scam hits particularly hard those who are new to social media and assume that a private message bearing an official logo is a trustworthy communication. For an elderly parent, the reasoning holds up: they wrote to the company, the company is replying.
A few simple habits, to pass on calmly:
- One single rule to remember: never give out a card number or a code received by text, to anyone, ever, whatever logo is displayed.
- A stalling reflex: "I'll call you back on the number from my contract." Taping the real customer service numbers near the phone works remarkably well, and a landline phone with large buttons with direct memory keys saves hunting through a contacts list.
- A designated point of contact: knowing who to call in the family before clicking on anything. More often than not, five minutes of waiting is enough for the scam to collapse.
Our articles on protecting older people from text scams and on a teenager's first phone are a useful complement to this approach: both ends of the age pyramid are targeted using the same psychological levers, with different pretexts.
Key takeaways
The fake customer service scam is one of the rare text-message frauds in which the victim has, without realising it, flagged up their own vulnerability. It is a reminder of a rule that goes well beyond smishing: what you publish online about your disputes, your expectations and your purchases is exploitable material.
Three sentences to keep in mind:
- A customer service team that replies in four minutes on a Sunday evening probably isn't the real one.
- A refund never asks for a card number, or a six-digit code.
- The right channel is always the one you open yourself, not the one held out to you.
You can also use a text-sending service to quickly warn someone close to you that this kind of message is going around: a short, direct message along the lines of "if an advisor writes to you after your complaint, don't give them anything and call me". The free text-sending form is on the home page, with no sign-up required. Sometimes a ten-word message sent at the right moment is worth more than a long explanation.
