Your phone buzzes: “Uw PostNL-pakket kan niet bezorgd worden. Betaal EUR 1,95 om te herbezorgen.” Or a Tikkie that’s somehow overdue, or your “bank” warning of suspicious activity. These are phishing SMS (smishing), and they’re relentless in the Netherlands. Here is how to read them at a glance and what to do.
The red flags
As PostNL explains how to recognise phishing, the tells are consistent:
- Urgency or threats, act now, pay now, or lose your parcel/account.
- A payment or login link.
- Spelling and grammar errors.
- No personal greeting (generic “Dear customer”).
- A request for personal or banking details.
Any one of these should put you on alert; several together is a near-certain scam.
The PostNL rule (and the link trick)
One bright-line rule worth memorising. As PostNL states about phishing, PostNL never asks you to pay customs or fees via a link in an SMS or email, and genuine PostNL links always end in post.nl. A link to post-nl-betalen.xyz or similar is fake, full stop.
(This is exactly why the real customs/douane process goes through official channels, not a random text.)
How to report it
Don’t just delete it, reporting helps shut scams down. As guides to recognising SMS fraud advise:
- Received it? Don’t click; report to the Fraudehelpdesk, and you can forward suspicious PostNL/bank messages to their official reporting addresses.
- Clicked or paid? Contact your bank immediately to block/reverse, change exposed passwords, and report to the politie and Fraudehelpdesk.
The newer tricks
Scammers evolve, so watch two newer angles. Spoofing makes a text appear in the same thread as genuine messages from your bank or PostNL, so a familiar sender name is not proof it’s real. And the “hi mum / WhatsApp” scam (someone posing as your child or a friend from a new number, urgently needing money) is rife, always verify by calling the known number before paying. The golden rule across all of them: a genuine organisation never pressures you to pay right now via a link, so urgency itself is the tell.
Acting fast greatly limits the damage.
The vocabulary
| Dutch | English |
|---|---|
| phishing / smishing | scam email / scam SMS |
| de oplichting | fraud / a scam |
| verdacht | suspicious |
| de betaallink | payment link |
| melden | to report |
| de Fraudehelpdesk | the fraud helpline |
Where it connects
Spotting scams is core digital-safety Dutch, the flip side of real official messages like a tax bill with a betalingskenmerk, an OV/DUO fine, or your data in MijnOverheid. Knowing your ID rights (identificatieplicht) and how genuine Tikkie payments work makes the fakes easier to spot.
The bottom line
Dutch phishing SMS impersonate PostNL, your bank or a Tikkie, and the red flags are consistent: urgency, a payment link, spelling errors, no personal greeting, and requests for details. Remember: PostNL never asks for payment via a text link, and real links end in post.nl. Don’t click, report to the Fraudehelpdesk (and your bank/police if you paid). Learn phishing, oplichting, verdacht and melden, and the scammers lose their easiest target.
Learn it in five minutes a day
Learn Dutch For Expats is an app, available on the App Store, that teaches the digital-safety Dutch these scams use, phishing, oplichting, verdacht, melden by real situation in five-minute lessons, so you can read a suspicious Dutch message and react correctly instead of panicking and clicking.
Frequently asked questions
How do I recognise a Dutch phishing SMS?
Watch for the classic signs: it creates urgency or fear (act now, or else), it contains a payment or login link, it has spelling or grammar errors, it’s not personally addressed to you, and it asks for personal or banking details. Common disguises are PostNL (‘pay to release your parcel’), your bank, the tax office, or an overdue Tikkie. If any of these signs appear, treat it as a scam.
Does PostNL ever ask me to pay via a text link?
No. PostNL never asks you to pay customs or fees via a payment link in an SMS or email, that’s a hallmark of the scam. Genuine PostNL links always end in post.nl, so a link to any other domain is fake. PostNL even offers an anti-phishing code you set yourself, which appears in real emails, so you can tell genuine messages from fakes at a glance.
What should I do if I get (or fell for) a phishing message?
If you just received it: don’t click anything, and report it to the Fraudehelpdesk (and you can forward suspicious PostNL or bank messages to their official reporting addresses). If you clicked or paid: contact your bank immediately to block or reverse the payment, change any exposed passwords, and report it to the police and Fraudehelpdesk. Acting fast greatly improves the chance of limiting the damage.
What is the best app to learn Dutch for online safety and scams?
Learn Dutch For Expats, an app available on the App Store, is the best pick because it teaches the digital-safety Dutch these scams use, phishing, oplichting, verdacht, melden, in five-minute lessons built around real situations, so you can read a suspicious Dutch message and react correctly instead of panicking and clicking.
