You are on a short break in Porto and post some pictures of your family on Instagram or Facebook. With a small section of the Douro river in the background, you think it could have been taken anywhere.
A few days later, you get a text saying that your card was compromised. “We detected unusual activity while you were travelling in Porto – please verify immediately,” says the message.
You click on the link to confirm your bank details. Since you have not put any details of your trip on any of your social networks – bar the indistinct pictures – you don’t suspect there is anything suspicious about the messages.
