CPF SMS Scams: How to Spot Them, Avoid Them, and Take Action

Arnaque CPF par SMS : comment les repérer, les éviter et agir ?

Have you just received a worrying text message about your Compte Personnel de Formation (CPF)? “Your balance is about to expire,” “Your account has been blocked,” “Click here to resolve your situation”… These messages, seemingly harmless, actually conceal increasingly sophisticated scam attempts. Their goal? To steal your training credits, your personal data, or trick you into paying for non-existent services.

Fortunately, it is possible to protect yourself. In this article, we explain how to recognize these fraudulent text messages, what risks are involved, and most importantly, what concrete steps you can take to secure your CPF.

What is a CPF SMS scam?

A CPF SMS scam, also known as smishing, is a fraudulent technique that involves sending a message that mimics official communication in order to deceive the recipient. Scammers impersonate organizations such as the Caisse des Dépôts, France Travail, or Mon Compte Formation, using logos, wording, and sender numbers that appear legitimate.

Their method is simple but effective: create a sense of urgency or fear to prompt the victim into clicking a malicious link or sharing sensitive information. For example, a text message may claim that your CPF account is about to be suspended, or that a free training course is being offered on the condition of an immediate response. Once the link is clicked, you are redirected to a fake website that closely resembles the official platform, where you are asked to enter your login credentials. The result: your CPF credits are stolen, and your personal data may be resold or used for other fraudulent purposes.

These scams are all the more dangerous because they exploit a communication channel that is difficult to trace. Unlike emails, text messages do not have advanced spam filters, making them vulnerable to attacks by fraudsters.

Why do scammers target the CPF?

The Compte Personnel de Formation is a prime target for fraudsters, for several reasons. First of all, the CPF balance can reach €5,000, a sum attractive enough to motivate scammers. In addition, many users are unfamiliar with the exact workings of their account, which makes them more susceptible to manipulation.

Text messages are an ideal channel for fraudsters: they are quick to send, inexpensive, and allow a wide audience to be reached in record time. Unlike phone calls or emails, SMS messages have a very high open rate, which increases the chances of success for scammers.

Finally, personal data linked to the CPF is particularly valuable. Once in possession of this information, fraudsters can not only drain your training account, but also commit other types of fraud, such as identity theft or fraudulent online purchases.

In 2024, the number of judicial requisitions processed by the Caisse des dépôts relating to the CPF stood at 1,132, representing a 40% increase compared to 2023. The number of requisitions in 2023 had itself doubled compared to 2022. This trend can be explained by the ease with which scammers can create fake websites and send bulk SMS messages, as well as by the lack of public awareness of these practices.

To give you a clearer picture: in 2025, 9 people suspected of taking part in a CPF scam were arrested in the Auvergne-Rhône-Alpes and PACA regions. The damage to the Caisse des dépôts amounted to over 15 million euros!

How to recognize a fraudulent SMS related to the CPF?

An unknown or suspicious sender is often the first clue. Official organizations use verifiable numbers or email addresses, such as ne-pas-repondre@moncompteformation.gouv.fr. On the other hand, a generic phone number or a dubious email address, such as service@cpf-secure.fr, should put you on alert.

Messages that create a sense of urgency are also a red flag. Phrases like “Your account will be suspended within 24 hours!” or “Final notice before permanent deletion!” are typical of smishing attempts. Public institutions always communicate in a neutral and informative manner, without resorting to threats or artificial deadlines.

Spelling or grammatical errors are another telltale sign. If you notice typos or awkward phrasing, be wary.

A link to a non-official website is a classic trap. Before clicking, hover your mouse over the link to see the actual URL. Be wary of addresses that imitate the official site, such as mon-compte-formation-secure.com or cpf-verification.fr. The only legitimate website is moncompteformation.gouv.fr.

A request for personal information, such as your social security number or bank details, is a definite sign of fraud. No official organization will ever ask for this type of data via SMS.

Offers that seem too good to be true should also raise your suspicions. Be wary of messages promising free training courses or exceptional bonuses. Training courses eligible for CPF funding are clearly listed on the official website, with no need to go through dubious intermediaries.

Finally, a threatening or aggressive tone is characteristic of fraud attempts. Institutions use neutral and professional language, without resorting to alarmist phrasing.

When in doubt, the golden rule is simple: do not click on the link and verify the information by logging in directly on the official CPF website.

Détecter une tentative de fraude au CPF par SMS

What to do if you receive a suspicious text message?

First of all, do not click on any link and do not reply to the message. Even if the SMS seems urgent, a single click can be enough to install malware on your device or redirect you to a site designed to steal your data.

Next, verify the authenticity of the message by manually logging in to the official CPF website. Compare the sender’s number with the official contact details available on moncompteformation.gouv.fr. If the message claims to come from a public organization, verify its accuracy by calling the official number or checking the communications published on their website.

Then report the SMS on dedicated platforms such as Signal Spam, Phishing Initiative, or the number 33700. These organizations collect reports to combat fraud and can block the numbers involved. You can also block the number on your phone to avoid receiving further messages from that contact.

If you have accidentally clicked on a link or shared information, act immediately. Change all your passwords, starting with those for your CPF account, your email, and your bank. Report the fraud on cybermalveillance.gouv.fr and file a complaint online via the Ministry of the Interior’s website.

Finally, raise awareness among those around you, especially people who are less familiar with digital technology. Share this article or official resources to help them recognize and avoid these traps.

What does the law say about CPF scams?

CPF-related fraud is severely punished by law. Identity theft, for example, is punishable by one year in prison and a €15,000 fine (Article 226-4-1 of the Penal Code). Fraud, meanwhile, can result in up to five years in prison and a €375,000 fine for deception aimed at obtaining a financial advantage (Articles 313-1 to 313-3 of the Penal Code).

If you are the victim of a scam, you can file a complaint at a police station or submit a pre-complaint online. In the event of financial loss, contact the Caisse des Dépôts to request a refund, subject to providing a copy of your complaint.

Please note: at SMS Partner, we are particularly vigilant against scams of all kinds. We only accept accounts with professional email addresses, and we always verify the identity of the companies sending you SMS messages. At the slightest doubt, the account is blocked and can no longer send messages.

Remember: when in doubt, don’t click, verify, and report. Vigilance is your best weapon against these scams. If you would like to go further in protecting your communications, discover our secure SMS solutions for businesses, designed to guarantee the confidentiality and integrity of your exchanges.

FAQ about

CPF SMS messages

+

1. Can I recover my stolen CPF credits?

Yes, under certain conditions. As soon as you discover a fraud, immediately contact the Caisse des Dépôts through your CPF account to report the incident. They can block the fraudulent training courses and, in some cases, restore your balance. Keep a copy of your complaint to support your refund request.

+

2. How can I tell if a text message really comes from the CPF?

Official organizations such as Mon Compte Formation or the Caisse des Dépôts never send SMS messages with clickable links or urgent requests. To verify the authenticity of a message, log in directly at moncompteformation.gouv.fr or call 39 39. Never trust an unknown number or email address.

+

3. What should I do if I have already clicked on a fraudulent link?

If you have clicked on a suspicious link, immediately log out of all your devices. Then change all your passwords, starting with those for your CPF account, your email, and your bank. Scan your device with an antivirus to detect any potential malware, then report the fraud on cybermalveillance.gouv.fr.