A new SMS phishing campaign in Romania is impersonating FAN Courier to trick users into entering their WhatsApp verification codes on fake websites.