A fraudulent SMS campaign is currently targeting users of the French internet and mobile service provider Free. These messages mimic official alerts from Free, attempting to trick users into sharing sensitive financial information. The texts often include a link that claims to help resolve a payment issue, but instead leads to a fake website designed to steal login credentials and banking details. The messages are carefully crafted to appear legitimate, using familiar language and formatting, and sometimes even display the sender's name as "Free" through a technique called spoofing, which makes the message look authentic. The fake websites created by scammers closely resemble the official Free customer portal. They use the same logo, colors, and sometimes even a replica navigation menu, making it hard for users to tell the difference between the real and fake sites. This is often achieved by copying screenshots of the real site, adding to the illusion of legitimacy. The fraudulent site asks users to enter personal details such as their customer ID and password. If these credentials are used on other platforms, scammers could gain access to the victim's real account. The form also requests credit card information under the pretense of resolving a rejected payment. In some cases, the form may set up a recurring payment method, allowing for larger unauthorized withdrawals later. Some versions of the scam even attempt to capture a two-factor authentication code from the user's bank, enabling scammers to validate larger transactions without the user's knowledge. According to Free, no legitimate service provider, including itself, sends payment links via SMS. Any payment-related issues should be resolved through the official customer area, which is accessible through the company's secure website or app. Users are advised not to click on links in suspicious messages. Instead, they should visit the official site or app directly by typing the URL themselves. If a real payment issue exists, it will appear in the customer area without the need for an external link. Users are encouraged to check the sender's phone number against previous official messages and to contact customer service through verified channels if they are unsure. Reporting suspicious messages to the short number 33700 can also help in blocking these scams more broadly.