The National Bank of Serbia published an “It is useful to know” consumer note on protecting against payment fraud that starts with an SMS, focusing on SMS phishing and SMS-based investment scams. The guidance explains how these schemes typically work and sets out practical checks to help users spot suspicious messages before sharing data or initiating transfers. The note describes phishing fraud as attempts to obtain users’ payment information to execute unauthorised transactions, and investment fraud as deception aimed at inducing users to transfer money to someone misrepresenting their identity. It highlights common SMS impersonation in Serbia (including public companies, state bodies, telecom operators and banks) and flags key warning signs such as unknown or foreign senders, unfamiliar links, grammatical errors and URLs that differ even slightly from genuine websites. Users are advised to verify links independently, remain cautious of messages designed to create fear or urgency, and never disclose confidential details of payment cards or other payment instruments. For victims, the National Bank of Serbia notes that refunds may be possible but depend on multiple factors, and that banks cannot be held responsible for users’ voluntary transfers to unknown persons in typical investment fraud scenarios.