Smishing is a type of phishing attack that uses SMS (Short Message Service) (or text messaging) to trick individuals into sharing personal information or clicking on malicious links.

The word “smishing” is a blend of “SMS” and “phishing.”

How Smishing Works:

• You receive a text message that looks like it’s from a trusted source, such as your bank, a delivery service, or even a government agency.
• The message often contains a sense of urgency, like “Your account has been compromised!” or “You missed a delivery!”
• It usually includes a link or phone number that directs you to a fake website or scammer, asking for sensitive info like:
  • Credit card numbers
  • Social Security numbers
  • Login credentials

Example Smishing Message:

Legitimate Texts:

• Come from a short code or official number.
• Use your full name, not just “Dear Customer.”
• Don’t ask for sensitive information via text.
• May tell you to log into your account through the official app or website, but won’t send suspicious links.

Fake Smishing Texts:

• Use urgent or threatening language.
  • • “Your account will be suspended if you don’t act now!”
• Include suspicious links or numbers to click or call.
  • • “Click here: bit.ly/bank-secure123”
• Use generic greetings.
  • • “Dear User” or “Hello Customer”
• Often have spelling or grammar errors.
  • • “We has detect unusual activity.”

How to Protect Yourself: