A quiet SMS arrives, almost unremarkable: "Your package is waiting for delivery, pay 1.95 euros in reshipment fees." This kind of message is often opened carelessly, especially when someone is expecting a delivery. Many French people click on the link without thinking, pay the small fee, and move on. But a month later, when they review their bank statements, they may be in for a shock: a recurring withdrawal, much larger than the initial 1.95 euros, has appeared. This seemingly minor payment was not what it seemed, and the situation highlights a clever and well-organized scam that starts with a deceptively harmless message. The phishing SMS imitates Chronopost, a well-known delivery service, and asks for 1.95 euros in reshipment fees for a fake package. This payment doesn’t unlock any delivery but instead authorizes a recurring withdrawal from the victim’s account. The link in the message leads to a page that closely mimics the official Chronopost website, with a payment field that seems harmless. The trap works because the amount requested is small—1.95 euros, roughly the price of a coffee. This low amount deactivates normal caution, making people less likely to question the message. The choice of 1.95 euros is not random. Cybercriminals have refined their strategy over the years, testing different amounts to find the psychological threshold that makes people least suspicious. An amount too low, like a few cents, would seem suspicious, while a higher amount, such as ten euros, would raise red flags. The 1.95 euro fee falls into a gray area where people are more likely to overlook it. It’s also low enough for banks not to flag it as potentially fraudulent, unlike a larger transaction from an unknown source. The real problem lies in the fact that no legitimate carrier, including Chronopost, requests reshipment fees via SMS. Any such fees are always communicated directly on the official website. The initial 1.95 euro payment is not for a delivery but for authorizing a recurring withdrawal. By entering their bank details on the fake site, victims unknowingly allow scammers to withdraw larger sums regularly in the following weeks. This fraud highlights a broader issue: our changing relationship with small amounts of money in the digital age. The ease of online payments, while convenient, can make us less cautious about seemingly trivial transactions. To avoid falling victim, it’s important to never click on links received via SMS for package-related messages. Instead, check the status of deliveries directly on the official website of the courier. Regularly monitoring bank statements can help detect unusual withdrawals early. If such a withdrawal is noticed, it is possible to object to it, and the bank can block future fraudulent debits. This case reminds us that the most effective scams are not always the obvious ones—they are often the small, seemingly insignificant requests that we overlook. Being wary of the trivial may be the best defense.