Campaign 1 Before you reply, stop and verify · October – December 2026
Fraud attempts can arrive by text message or phone call and look like real communications. They may use well-known names, similar numbers, prizes, threats or urgent requests. A single sign does not prove fraud on its own, but it is a reason to stop and verify.
#LaClaveEsVerificar · Campaign 1
You have the right to know how your personal data is used and to ask for it to be updated or rectified (corrected) when it is incomplete, outdated or wrong. When you get an unexpected request, don’t share passwords, authentication codes or financial information. Use the channels set up by the organization to exercise your rights.
Smishing uses messages to lead you to links or ask for information. Vishing uses calls and deception to obtain data. Spoofing alters or fakes the caller ID you see. Wangiri leaves a missed call to get you to call back, sometimes to premium-rate lines.
Unexpected requests for passwords, codes, payments or financial data; links you weren’t expecting; unsolicited prizes; threats; pressure to act right away; or instructions to keep the conversation secret.
Close the message or end the call. Don’t share information or open links you weren’t expecting. Look up the official website, app or phone number yourself and confirm whether the request is real.
Before you block or delete the contact, keep the message, the number, the link and any receipts. Change any passwords you shared, contact the organization involved through its official channels and use the appropriate guidance and reporting route.
#LaClaveEsVerificar
Before you reply, stop and verify
Que parezca real no significa que lo sea
Tu información tiene valor
Actuar rápido también protege
Depending on the case:
| Case | Route |
|---|---|
| Carrier or organization involved | Use the official channel you looked up yourself. Ask for and keep the case number. |
| Guidance and reporting of digital incidents | See the National Police CAI Virtual at caivirtual.policia.gov.co. Guidance or an incident report does not replace a formal complaint. |
| Formal complaint | Use the National Police ¡A Denunciar! portal at adenunciar.policia.gov.co in the relevant category, or contact the Attorney General’s Office (Fiscalía): 122 from a mobile phone or 01 8000 919748 from a landline. |
| Extortion or kidnapping | Call the National Police line 165, dedicated to anti-kidnapping and anti-extortion. |
| Impact on financial products | Report it immediately to your financial institution through its official channels and ask for the case number. You can also go to the Financial Consumer Ombudsman or file a complaint with the Financial Superintendence of Colombia: www.superfinanciera.gov.co. |
| Misuse of personal data | First submit a query or claim to the data controller or processor. Once that process is complete, where appropriate, you can file a complaint with the Superintendence of Industry and Commerce: www.sic.gov.co. |
| Immediate risk to your safety | Call the emergency line 123. |
The CRC provides educational guidance within its remit. It does not receive criminal complaints or replace the National Police, the Attorney General’s Office or the authorities responsible for financial matters, personal data protection and emergency response.
Practice
Fictitious examples. Read each one, decide, then check the answer.
Today · 10:24
BANK: Your account has been BLOCKED. Go NOW to bank-account.example to avoid permanent cancellation.
Signs of fraud
Urgency, a link you weren’t expecting and an ordinary mobile number. Don’t open the link: go to your bank’s official app or website yourself.
Today · 10:24
Sample Bank: We recorded a purchase with your card ending in XXXX. If you don’t recognize it, contact your bank through its official channels.
It can be legitimate
It can be a real alert: it informs you, doesn’t ask for data, codes or payments and has no links. Still, if in doubt, verify by calling a number you look up yourself, not one included in a message.
Incoming call
+57 3XX XXX XXXX
Unknown number
“This is your mobile carrier. To avoid suspending your line you’ll get a code by text message; please read it to me.”
Signs of fraud
They ask for a code during an unexpected call. Hang up and contact your carrier through its official channel.
TODAY
Hi mom, my phone broke and this is my new number. I need you to send me money urgently and don’t tell anyone.
Signs of fraud
Urgency, a request for money and secrecy. End the contact and verify by calling that person’s usual number.
Today · 10:24
Congratulations! You won a phone. Just pay for shipping here: fake-prize.example
Signs of fraud
A prize you weren’t expecting that requires a payment. Don’t give data or make payments to receive it.
New rules
With Resolution 8308 of 2026, the CRC set gradual measures against fraud in calls and text messages:
No tool removes the risk or replaces a person’s own verification.
No. Inalambria delivers messages on behalf of companies and organizations, but it will never call or text you to ask for passwords, codes or financial data.
No. Not every commercial, advertising or collections message is fraudulent. If something raises doubts, verify through an official channel you look up yourself.
No tool removes the risk or replaces your own verification. Alerts help, but the key is still to stop and verify.
You can register your number for free in the CRC’s Excluded Numbers Registry (RNE). Informational messages about your products, such as bank alerts, will keep arriving.
Depending on the case, use the official guidance and reporting routes on this page: the organization involved through its official channel, CAI Virtual, ¡A Denunciar!, the Attorney General’s Office, line 165, the Financial Superintendence, the SIC or line 123.
Every quarter, following the CRC’s educational campaign schedule. This page updates automatically with the current campaign.
Follow the CRC: @CRCCol on X, Instagram, Facebook, YouTube and TikTok.
