Table of Contents
What Is Smishing?
Smishing is a form of phishing, or an attempt to trick you into giving away personal information.
Smishing and phishing differ by how the scam is delivered. Smishing attacks are sent via text message, and phishing attacks via email. Its name is a combination of SMS, the text messages you receive on your mobile device, and phishing.
Like a phishing email, a smishing message will usually appear to come from a legitimate organization, asking you to click on a link or provide specific information in a reply. A common tactic is to ask for a confirmation message, asking you to reply or to click on a link in order to confirm enrollment in a newsletter or program or to unsubscribe.
By clicking on the link, you run the risk of automatically downloading a malicious file to your phone, such as a keylogger that can be used to steal your personal information. Alternatively, the smish text might urge you to call a specific phone number, which will charge you an large sum of money when called.
What Can You Do?
The best way to prevent yourself from falling victim to a smishing scam is simple: do not give up private information to an unsolicited or unknown caller. It is difficult to know who, precisely, is on the other end of the line, so giving out your credit card number, verification number, PIN, or any other sensitive information is always dangerous.
If you suspect that you have received a suspicious text, follow our procedures for reporting it immediately:
How to report a smishing text?
Forward suspicious SMS messages to 7726:
When you receive a spam text message on your phone, forward that text to the short code 7726 (which spells "SPAM"). You'll then receive an automated message from your wireless carrier asking you then to enter the phone number from which the spam text was sent.
How to forward an SMS
Learn more about smishing defense. (Vimeo)
How Can I Protect Myself?
To keep yourself safe from smishing attacks, keep the following tips in mind:
- If you don’t recognize the sender’s area code, search it online.
- You can block the sender to prevent further communication.
- If your phone number is linked to an online profile, smishers can tailor their message to your interests.
In general, your best bet is to avoid responding to any unsolicited text message from a sender or phone number that you don't recognize. Exercise caution when reading text messages, and you can avoid compromising your mobile device.
Your Boss Isn't Asking You For A Gift Card
Did you get an message from your boss asking you for a favor? Does your boss need you to send gift cards to pay for an upcoming office party? Before you go out and pay up, ask yourself: is that really your boss? It could be a scammer trying to get your money.
For more information: Federal Trade Commission Consumer Alert