Phone Scammers Used Fear to Sell €4,000 of Fake Filters

Tech.eu Cybersecurity · Medium sophistication
Last updated August 17, 2026

A real phone scam convinced an elderly woman that her drinking water was unsafe and pressured her into buying four overpriced “water filters,” costing about €4,000. The article also describes common Portugal-targeted scams, including “Hi Mum/Hi Dad, I lost my phone” money-transfer fraud and SMS impersonation of the national health service demanding a small, specific payment.

How the water filter scam worked

A phone scammer called an elderly woman and claimed her drinking water was unsafe. The caller used emotional pressure, suggesting she was putting her family at risk by continuing to use the water, and pushed her toward an urgent solution: buying water filters on the spot. She ended up purchasing four filters at around €1,000 each, a price roughly 50 times their actual value of about €20. No hacking or technical exploit was involved. The entire scam relied on manufactured fear and urgency delivered over a phone call.

Why the pretext succeeded

The scam worked because it targeted a basic safety instinct rather than a technical vulnerability. Claims about contaminated water and harm to grandchildren and children created immediate emotional stress, which made it harder for the victim to pause and verify the claim through an official source. This pattern shows up across the other scams described alongside it: family impersonation texts and fake healthcare payment demands both use urgency and plausible framing to short-circuit normal skepticism.

Other common patterns to watch for

  • Family impersonation texts: a message appears to come from a child claiming they lost their phone and are texting from a new number, then quickly asks a parent to transfer money or pay a bill on their behalf.
  • Fake healthcare payment demands: a text impersonating the national healthcare service claims an outstanding payment of a specific amount, such as €46 or €47, banking on the fact that many recipients have recently visited a doctor and won't question it.
  • Unsolicited safety warnings tied to a sales pitch: any unexpected call claiming an urgent health or safety issue that conveniently has a product for sale attached should be treated with suspicion.

Building resistance to these tactics

Defenses against this type of social engineering are less about spotting a specific script and more about recognizing manipulation patterns: artificial urgency, emotional pressure, and pressure to act before verifying. Practical steps include:

  • Verify unexpected safety claims by contacting the relevant authority or company directly using a known, official number, not one provided by the caller.
  • Treat any request for money from a family member on an unfamiliar number as unverified until confirmed through an existing contact method.
  • Question specific but unexplained payment amounts in text messages, especially ones tied to plausible recent events like a doctor visit.
  • Encourage employees to apply the same scrutiny to personal calls and texts as they would to suspicious workplace emails, since these tactics translate directly to business email compromise and vishing attempts against organizations.

Key findings

  • A phone scam used fear and emotional manipulation to sell four water filters for ~€1,000 each, though they were worth ~€20.
  • Common local scam patterns in Portugal include family-member impersonation (“Hi Mum/Hi Dad… lost my phone”) that pushes urgent money transfers.
  • Another frequent lure impersonates the national healthcare service via message, claiming an “outstanding payment” of “€46 or €47.”
  • The described scams rely on urgency, emotional pressure, and impersonation rather than technical hacking.

Who’s being targeted

  • Commonly targeted roles: All employees (personal device scam awareness), Finance teams (personal payment/wire vigilance), Customer support/call center staff, Executives and assistants, Employees with elderly relatives/caregiver responsibilities.
  • Affected industries: Consumers/Households, Banking/Financial services, Telecommunications, Healthcare (impersonated brand/government service).
  • Attack channels: vishing, smishing.
  • Impersonated: Water safety authority / water company representative (implied), Portuguese national healthcare service, Family member (victim’s child).

Red flags to watch for

  • Creates fear about health/safety without evidence (“water… wasn't safe”)
  • Uses emotional pressure about harming family (“contaminating… grandchildren and children”)
  • Product price wildly out of line with typical value
  • Unexpected payment demand via text
  • Uses oddly specific, repeated amounts (“€46 or €47”)
  • Relies on plausibility (“may have gone to the doctor recently”) to reduce scrutiny
  • Message from a new number claiming a sudden device loss
  • Urgency to move money quickly
  • Pushes money transfer instead of normal verification
Try Mirage

Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.

Get a demo

Frequently asked questions

How did the water filter phone scam work?

Callers told the victim her drinking water was unsafe and used emotional pressure about contaminating her family to push her into buying four water filters at around €1,000 each, though each was worth about €20.

What is the Hi Mum, Hi Dad scam?

It is a smishing scam where fraudsters impersonate a victim's child texting from a new number, claiming they lost their phone, then create urgency to get the parent to transfer money or pay a bill.

How can I spot a fake healthcare payment text?

Watch for messages claiming an outstanding payment of a specific small amount, such as €46 or €47, since scammers rely on people assuming it relates to a recent doctor visit rather than verifying with the official service.

Were these scams technically sophisticated?

No, the article notes these scams relied on urgency, emotional pressure, and impersonation rather than technical hacking.

Read the video transcript

In Portugal, one call scared a woman into buying four “water filters” for €4,000… filters worth about €20 each. The caller told her, “your water isn’t safe, you’re contaminating your grandchildren” and pushed her to buy filters immediately. Same playbook as “Hi Mum, I lost my phone, I need money” and fake health SMS saying, “You must pay €46 or €47.” Here’s the trick: they don’t hack systems, they hack feelings. They use health fear, family panic, or small believable bills to rush you so you don’t check who’s really asking for money. Your move: if a call or message mixes urgency with money or safety, hang up or close it, and call the official number you already trust to check if it’s real.

Similar attacks

Singapore Runs AI Scam Call “Fire Drills”

Singapore Runs AI Scam Call “Fire Drills”

Singapore’s Cyber Security Agency is running a national exercise where volunteers receive simulated robocalls that mimic government impersonation scams, including AI-enabled calls. The article also points to real-world cases where criminals impersonated company executives on WhatsApp and even used…

August 15, 2026
Tesla ‘Crypto Presale’ Kit Fuels New Scam Wave

Tesla ‘Crypto Presale’ Kit Fuels New Scam Wave

The article describes real-world social engineering aimed at both consumers and financial firms, including phone-based attacks on hedge funds and a turnkey scam kit that impersonates Tesla to steal cryptocurrency. The kit uses a professional-looking fake presale website with urgency tactics…

August 12, 2026
Phishing Hits M365; Deepfake Vishing Targets Funds

Phishing Hits M365; Deepfake Vishing Targets Funds

The roundup describes real social-engineering incidents: a phishing email that led an employee to enter credentials on a fake Microsoft 365 login page, and a wave of voice-phishing attempts against major hedge funds using voice-mimicking technology. Both incidents show practical lures that can be…

August 7, 2026
Fake $149.99 Apple/Amazon Charge Popup Scam

Fake $149.99 Apple/Amazon Charge Popup Scam

A scam campaign uses full-screen browser popups impersonating Apple Support or Amazon to claim an “unauthorized” $149.99 charge and pressure victims to call a phone number. Callers reach a live scammer posing as support who tries to gain remote access or steal payment/account details, sometimes…

August 6, 2026
ChatGPT Billing Phish and Fake Snap Support Scams

ChatGPT Billing Phish and Fake Snap Support Scams

This roundup describes real-world social engineering, including phishing emails that impersonate ChatGPT billing to steal payment card data and a convicted attacker who posed as Snapchat support to trick people into handing over login codes. The common theme is impersonation of trusted brands to…

July 31, 2026
How Attackers Bypass MFA in the Real World

How Attackers Bypass MFA in the Real World

The article describes real-world ways attackers get around multifactor authentication (MFA), including “push bombing” (MFA fatigue), phishing pages that relay codes in real time, SIM swapping, and stealing session cookies so MFA isn’t needed again. It also cites known incidents (e.g., Uber 2022 MFA…

July 29, 2026