In recent days, drivers from various cities in Bulgaria have reported receiving SMS messages about "unpaid traffic fines," sent from foreign numbers, including telephone codes from outside Europe. In the texts, the scammers pose as an official "road traffic agency" and threaten the recipient with interest, vehicle impoundment, and damage to their "credit record" if they do not react by a specific time and date.
The scheme is a new variation of the familiar phishing model: instead of an email or a link on social media, here the scam comes as an SMS that at first glance looks like an official notification. In specific cases, the message arrives from a number with an international code, for example from Asia, but the text is in Bulgarian and begins with a supposedly official title in square brackets. The recipient is asked to reply to the SMS or follow additional instructions.
What the fake message looks like
A typical example of the fraudulent SMS starts with a header like "Bulgarian Road Traffic Agency" or a similar fictitious institution. This is followed by text claiming that "our records show that you have unpaid traffic fines" and specifies a deadline – for example, May 7, 2026, 11:59 PM, by which the fines must be paid.
Next, the "measures" that will follow if payment is not made are listed – adding a late payment fee (e.g., 35%), towing and impounding the vehicle, and even affecting one's "credit record". The end of the message often includes an instruction to reply via SMS or visit a link for "verification and payment". This is where the danger lies – replying or clicking opens the door for further fraud.
Official warnings: the state does not send fines from a Filipino or Moroccan number
In just the last few weeks, several institutions have already issued warnings about such SMS campaigns. Municipal companies and regional directorates of the Ministry of Interior have reported a wave of fake messages related to "illegal parking fines" and "unresolved traffic violations," sent from foreign numbers and accompanied by links to suspicious websites.
These official communications remind the public that systemic SMS messages from Bulgarian institutions come only from short national numbers (four-digit), not from long international numbers with codes from other continents. Furthermore, real fine notifications contain specific data – vehicle registration number, date of the violation, amount of the sanction – rather than general phrases like "unresolved traffic violations" and threats of "interest per day" percentages.
What is the goal of the scammers
In such SMS campaigns, the goal is usually either to directly steal money or to collect personal data. In some cases, the link in the message leads to a fake website that imitates an institution and requires the entry of a license plate number, personal ID (EGN), bank card details, or payment confirmation. In other scenarios, replying to the SMS may activate a subscription to a paid service or be used to verify a number that is then targeted with new scams.
Often, the scam relies on three factors: fear (no one wants their car to be towed), urgency (a short deadline and threat of extra fees), and a lack of information (many people do not know exactly how real fine notifications are sent). The combination makes some drivers prone to reacting impulsively – to reply or click before checking.
Context: a boom in phishing and online scams during 2025–2026
According to the 2025 annual report of the Ministry of Interior, the institution received 1,757 reports of online fraud related to phishing, cryptocurrencies, investment schemes, and social media account theft. As a result, over 200 pre-trial proceedings were initiated, and access to numerous sites with illegal content was blocked.
The new wave of SMS "fine" scams logically fits into this context – scammers are simply changing the channel, not the mechanics. Instead of an email or an advertising post on a social network, victims are now sought through direct messages on a phone, which people perceive as a more personal and reliable space.
How to recognize fake fine SMS
Cybersecurity experts and representatives of institutions share several clear signs by which such messages can be recognized:
- Sender from a foreign number – official Bulgarian institutions do not send SMS from numbers with codes from other countries.
- Vague or non-existent institution – names like "Bulgarian Road Traffic Agency" that do not correspond to real structures.
- General, not specific data – absence of license plate number, exact date, and place of the violation.
- Threat of a short deadline and percentages – adding a "35% fee" or "interest per day," which does not correspond to the actual procedure for collecting fines.
- Call to reply or click on a link, instead of being directed to official channels: Ministry of Interior website, government e-services, or an in-person counter.
If even one of these signs is present, the chance that the message is fraudulent is very high. In such a case, the safest action is to ignore it, do not reply, and do not open links.
What to do if you receive such an SMS
Specialists recommend several concrete steps:
- Do not reply to the message and do not call the number from which it was sent.
- Do not enter personal or bank details on sites opened through such links.
- Check for real fines through official channels – the e-services portal, the Ministry of Interior website, or at a counter in the relevant offices.
- If in doubt, notify the police – especially if you have shared data or attempted a payment.
- If you have entered card data, immediately contact your bank to block the card and prevent transactions.
In some cases, institutions encourage citizens to send screenshots of such messages so that schemes can be tracked and evidence gathered. The sooner a specific scenario is identified, the easier it is to warn a wider circle of people.
Why this scam "works" right now
The fact that the country is introducing new fine notification systems and that there is talk of digitizing services makes the ground more favorable for such scams. Many drivers know that "they are sending SMS for violations now," but are not aware of what the original official message looks like. This creates an informational "gray area" that scammers exploit.
General distrust of institutions also has an influence – people believe that "someone might have made a mistake" and prefer to quickly pay a small sum to "get rid of the problem." In 2025, reports of phishing and other online scams were already over seventeen hundred, and the actual number of those affected is likely higher, as not every victim files a report.
This makes informational campaigns and the media key – the more often people hear that "such messages are fraudulent," the lower the chance of them being misled in a moment of stress.
Conclusion: the SMS is not a sentence, but an occasion for checking
The most important message to drivers is clear: an SMS from a foreign number that scares you with unpaid fines and makes you rush is not a sentence, but a warning sign. In the era of digital services, it is normal for some communication with the state to go through the phone, but that does not mean every message is real.
When it comes to money, license plates, and personal data, the rule is simple: first check through an official channel, then – if necessary – pay. In the meantime, such schemes remind us that digital hygiene is now part of our daily security, no less important than a locked door or a seatbelt in the car.