Smishing
Smishing is phishing carried out through SMS text messages. The attacker sends fraudulent texts to trick recipients into revealing sensitive information such as login credentials, bank account details, or credit card numbers.
Updated
Overview
Smishing texts often promise something, such as free prizes, gift cards, coupons, or help paying off student loans. Others claim a problem: suspicious activity on an account, a problem with payment information, a fake invoice, or a package delivery notice. The message asks the recipient to share personal information or to click a link to learn more.
A link may lead to a spoofed website that looks real, where logging in hands the username and password to the scammers. Other messages install malware on the phone that steals personal or financial information without the user noticing. With a password, account number, or Social Security number, scammers can get into email, bank, or other accounts, or sell the information to other scammers.
The FTC advises not clicking links in an unexpected text that asks for personal or financial information, since legitimate companies won't ask for account information by text, and contacting the company through a phone number or website known to be real. Phones, wireless providers, and call-blocking apps can filter and block unwanted texts. The Canadian Centre for Cyber Security suggests that organizations discuss smishing protection with their telecommunications providers, since mobile network operators are often better placed to block attempts before they reach users.
Similar Terms
2 termsFrequently Asked Questions
What is a smishing text?→
A smishing text is a phishing attack sent through short message service (SMS). It asks for personal information or a click on a link, often with a promise such as a free prize or gift card, or a claim about suspicious account activity, a payment problem, or a package delivery.
How do you report a smishing text?→
The FTC lists three ways: copy the message and forward it to 7726 (SPAM) so the wireless provider can spot and block similar messages, report it as junk or spam in the messaging app, and report it to the FTC at reportfraud.ftc.gov.
How do you protect yourself from smishing?→
Do not click links in unexpected texts that ask for personal or financial information. If the message might be real, contact the company through a phone number or website you know is real, not the details in the text, and turn on spam filtering or blocking on the phone.
Related
Tool categories
Glossary terms
Sources
Definitions follow the government and standards body sources listed above. This site is not affiliated with the agencies or organizations cited.