SMISHING

Very high chance - 95%+ which is scam. What you have received is the classic *VAS / Premium Subscription* scam that circulates a lot in Angola with short codes like 19322. It's smishing. Analyze the signs: *1. You didn't ask for anything and you've been charging for it* > "We receive your subscription request at 35 KZ per day" - 35 KZ per day = 1,050 KZ per month. It's the technique to charge you without you noticing the Unitel/Movicel balance. Subscription scams work like this - you are unknowingly subscribed and charged via the operator. 3c88 *2. Link to http://final.xyz* The 'http://joycasa.xyz/' link is the biggest alert. Legitimate websites in Angola http://usam.co.ao,.ao http://ou.com. Domains with http://final.top,.xyz,.info are classic red flag fraud. Never click. 6021 *3. Request to send STOP* That's the trap. It sounds like it's helping, but answering STOP, NO, YES or anything just confirms to the criminal that your number is active and that a real person has read it. Then you get _more_ spam, not less. 6021 *4. Portuguese error and urgency* "if the transaction is not done by you" - Portuguese badly written and tries to create panic for you to click fast. What NOT to do: - *Do not click* on the 'joycasa.xyz' link - *Do not text STOP to 19322* - will confirm your number as valid - *Do not forward the message* What to do now: 1. Delete and block 19322. In your screenshot you already have the *Report* button. 2. Check if you have been charged: Enter your operator's code to check active subscriptions. On Unitel it is usually '*191#' or call 191. Ask to cancel all value-added services. 3. If you clicked on the link and entered card details or Multicaixa Express, call the bank immediately. 4. If you only clicked and didn't put anything, close the page, clear the browser history.