Text Messages and Smishing

Cyber attacks that target individuals through SMS.

Smishing is the text message version of phishing, with scammers sending text messages posing as reputable companies to request personal information, login information, passwords, or other sensitive details. Scammers take advantage of the short form nature of text messages and common usage of link shorteners such as bit.ly, but their goal is still the same as phishing and most other forms of fraud: to steal your identity and/or money. You can typically verify the authenticity of any text message by contacting the company directly to see if they are trying to reach you for a service issue. The best way to deal with smishing is don’t respond, block the sender, and (most importantly) don’t click any links.

Text message fraud is being increasingly complicated with scammers sending a vague “hello” message, sending a “follow-up” message addressed to someone else, or stating that a friend gave them your number. Scammers are trying to both verify the authenticity of the phone number by tempting you to respond, as well as trying to get you to let your guard down by building familiarity and rapport. Then they will typically send a message with a malicious link, claiming to be their social media profile inviting you to connect, an event invite, or something else that may tempt your curiosity. Again, just like with smishing, the best way to deal with these scammers is don’t respond, block the sender, and (most importantly) don’t click any links.

Additional Resources:

• Enrich Article: Identity Theft Scams On Your Cell Phone
• Enrich Article: 5 Steps for Avoiding Phone, Email, and Mailed Scams
• Enrich Article: Smishing: What Is It and How Can You Protect Yourself?
• Webinar Recording: ID Theft Prevention