Short answer: any text message that uses fear or a promise of money to push you to tap a link or install an app is a scam until proven otherwise. Official bodies never ask you by SMS to install an app (an APK file) or to enter your card details.

What do these messages look like?
Common patterns in Iran:
- Court notice: "A complaint has been filed against you, sign in to view the notice"
- Justice shares, subsidy or coupon: "Your payment is ready, register to receive it"
- Traffic fine: "You have an unpaid fine, you have 24 hours"
- Parcel delivery: "Your parcel is waiting, pay the delivery fee"
They all do one thing: create urgency, so you tap before you think.
5 signs a message is fake
- The link looks odd. Official addresses usually end in
.irwith the organisation's name spelled correctly. Addresses likeadliran-sana.xyzor shortened links (bit.lyand similar) are red flags. - It asks you to install an app. No official body sends court notices or subsidies as an install file.
- It is urgent or threatening. "Today only", "otherwise a ruling will be issued".
- It asks for a tiny amount. "Just a small service fee". The amount is not the goal; your card details and password are.
- It comes from a personal number. Official messages usually come from a known short sender, not an ordinary mobile number.
If you are unsure
- Don't tap the link. Type the official address yourself, or open the official app from the app store, and check there.
- Read the address carefully. One extra or swapped letter is enough to make a fake site look real.
- Ask someone. A short call to the organisation or someone you trust can prevent a costly mistake.
If you tapped the link or installed the app
Quickly, in this order:
- Turn off mobile data (airplane mode).
- Uninstall the unknown app. If it won't uninstall, check "device admin apps" in your phone's settings and remove its access.
- Change your card's second password and online banking password, preferably from another phone or computer.
- Call your bank and temporarily block the card if you see any suspicious transaction.
- Report it to the cyber police (FATA):
cyberpolice.iror 096380.
These fake apps usually take over your text messages to read the bank's one-time passwords. That is why speed matters.
One simple habit that removes most of the risk
Keep "install unknown apps" turned off in your phone's settings. Then even if you tap a link by mistake one day, a fake file won't install so easily.
Share this with your parents and anyone less comfortable with phones; they are the most frequent victims of these messages.
FAQ
I only opened the message and didn't tap the link. Am I at risk?
No. Reading the message is harmless; the risk starts with tapping the link, entering details or installing an app.
I tapped the link but entered nothing and installed nothing. Should I worry?
The risk is low. To be sure, check your installed apps and remove anything unfamiliar.
How do I know if I really have a court notice?
Sign in to the official Sana system yourself (adliran.ir), not through the link in the message.
Is an antivirus enough?
It helps, but the best protection is never installing an app from an SMS link.

