Two messages, one difference

A message quotes my ID number. Does that prove who sent it?

No. Knowing your name, ID number, address or last card digits does not prove who sent a message. Those details leak in breaches and get traded. What tells you more is what the message asks you to do.

Two messages. One difference.

An ordinary notice QUIET

illustrative example

EXHIBIT · PASTED MESSAGE

Received via: SMS EN

Hello Dana Levi, your order ending in card 4291 shipped to 14 Herzl Street. It is on its way and should arrive this afternoon. The courier will leave it at your door, nothing is needed from you.

Illustrative example of the pattern, not a real message someone received.

Same details, now with an ask WORTH A CHECK

illustrative example

EXHIBIT · CHECK BEFORE YOU ENTER YOUR PASSWORD.

Received via: SMS EN

Hello Dana Levi, ID 028•••937, regarding your order to 14 Herzl Street. A customs fee is due to release it. Pay within 24 hours at parcel-release-fee.example or it will be returned to sender.

Illustrative example of the pattern, not a real message someone received.

The one difference

Both quote your real details. The first asks nothing of you. The second uses those details to push a payment on a deadline. The details are the same, only the ask changed.

They knew my full name and ID number. Isn't that proof it is official?

No. Personal details are widely leaked and traded, so someone quoting them proves they bought or found a list, not that they are who they claim. Check the ask, not the data they already hold.

Where would a stranger get my ID number?

From data breaches. Anthropic's September 2026 threat report describes criminals exfiltrating more than 300,000 national identity records from a single government system, the kind of leaked data later used to make fraud feel personal.

So what actually tells me something?

What the message asks you to do. A notice that needs nothing from you is ordinary. The moment it asks for a payment, a code, or a login on a link, slow down and verify on a channel you opened yourself.

What to do

Ignore the fact that they know your details. Judge the ask on its own.
Do not pay or log in through a link in the message. Open the company's official app or site yourself.
If it claims to be a delivery or a bank, check the order or account in the app you already use.

Common questions

A message had my correct ID number. Doesn't that mean it is genuine?

No. Leaked ID numbers are bought and sold. Quoting yours shows someone has a list, not that they are the company they name. The ask is what to check.

It quoted my address and the last digits of my card. Should I trust it?

Treat those as data anyone could have obtained, not as proof. A real notice rarely needs a payment or login through a link. Verify in the official app instead.

How do scammers get so much personal data?

Large breaches leak names, ID numbers and addresses in bulk, and the data is traded. That is why personalized details are common and why they prove little about the sender.

Not sure about a message?

Check a message you are not sure about

Detection runs 100% locally on your device. We store nothing.