Andorra's FEDA Warns of Phishing SMS Stealing Bank Details

FEDA, Andorra's public electricity provider, has warned customers about a phishing campaign involving fraudulent SMS messages impersonating the company to steal personal and banking details.

The company issued the alert on Thursday, reporting that cybercriminals are sending texts claiming a payment receipt has been returned. These messages contain a link that leads recipients to a fake website mimicking FEDA's official page, which then redirects users to a bogus payment platform.

FEDA's cybersecurity teams have already blocked the implicated URL. However, the company cautioned that the attackers may switch to new domains or links to continue targeting residents.

Official FEDA communications always identify the sender as "FEDA" rather than an unknown or foreign number—such as the French one noted in some reports—and customers should distrust messages from unfamiliar sources.

To stay safe, FEDA urges people to check link addresses before clicking, ensuring they match official channels. It advises against entering personal or financial information if authenticity is in doubt, and recommends avoiding suspicious links altogether, skipping sensitive actions amid fraud indicators, and deleting suspect texts immediately.

Anyone receiving such a message should contact FEDA directly through verified channels to confirm its legitimacy.

The company is working with Andorra's National Cybersecurity Agency to monitor the situation. No data breaches have been detected so far, and FEDA is assessing the attack's scope. If any data protection issues arise, it would notify the Andorran Data Protection Agency and affected individuals as required.