SMS Scams • Smishing

What Is Smishing? How SMS Phishing Scams Work

Smishing is phishing delivered by text message. These SMS scams use urgency and fake links to steal passwords, banking details, or personal information.

Start SMS Training View All Modules
Simple steps, real-world examples
Built for mobile-first scams
Learn the “pause + verify” habit
Quick takeaway
Smishing succeeds because people tap links faster on phones. Treat unexpected texts like suspicious emails.
Goal: Steal credentials, money, or identity.
Method: Fake alerts + short links.
Defense: Verify through official apps/sites.

What Is Smishing?

Smishing (SMS phishing) is a scam that uses text messages to trick you into clicking a malicious link, calling a fake support number, or sharing sensitive information. The message usually pretends to be from a bank, shipping carrier, retailer, or government agency.

How Smishing Scams Work

  1. You receive an urgent text (delivery problem, account alert, unpaid toll, suspicious charge).
  2. The text pushes you to act fast (“verify now,” “last chance,” “avoid suspension”).
  3. You click a link or call a number that leads to a fake page or scammer.
  4. They steal credentials or payment info and may reuse it across accounts.

Common Smishing Examples

  • Package delivery scams: “USPS/UPS delivery failed — reschedule here.”
  • Bank alerts: “Unusual activity detected — confirm now.”
  • Password reset: “Your account was accessed — reset immediately.”
  • Unpaid tolls: “Final notice — pay your toll to avoid penalties.”
  • Prize / refund: “You’re eligible for a refund — verify details.”

Smishing Red Flags

  • Unexpected message about money, security, or delivery
  • Shortened links (bit.ly, tinyurl) or weird domains
  • Pressure to act quickly
  • Requests for codes, passwords, or payment info
  • Spelling/formatting that feels “off”

What To Do If You Get a Smishing Text

  1. Don’t click the link or reply with information.
  2. Verify independently by using the official app or typing the website manually.
  3. Block and report the number (carrier reporting tools help).
  4. Delete the message.

If You Clicked the Link

  • Close the page immediately
  • Don’t enter credentials
  • Run a security scan if you downloaded anything
  • Change passwords and enable MFA if you entered info

Practice SMS Scam Detection

Smishing is designed for fast reactions. Training helps you build the “pause + verify” habit so you don’t tap first and think later.

Start Smishing Training Use Scam Lookup

FAQ

Is smishing the same as phishing?

Smishing is phishing delivered by text message. The goal is the same: steal information or money using deception and urgency.

Why are SMS scams so effective?

People act faster on phones, links are harder to inspect, and texts feel personal. Smishing takes advantage of quick taps and trust.

Should I reply “STOP” to smishing texts?

If it’s a legitimate service, STOP can help. If it’s a scam, replying confirms your number is active. When unsure, don’t reply—block and report.