Smishing is phishing through text messages. These attacks are similar to phishing, but they occur on mobile devices. Smishing links send users to fake websites that are designed to look just like the real website or they provide a contact number that directs calls to the phisher.
Red flags for smishing are:
- Messages implying that your account has been compromised. If you are concerned that this may have happened, call your financial institution directly.
- Messages implying an account has unusual activity or has expired. If you think this may be legitimate log into the account directly. Do not use the link or number provided. If you are still unsure, call the company directly.
- Messages with links to surveys offering financial incentives.
- Messages from spoofed accounts. This may look like a message coming from a number you know, but the message content is strange. If you interact with it, a request for money will likely follow. When in doubt, call the person directly.
- Messages saying that you have won the lottery, some kind of contest, or other reward.
- Messages implying there is something wrong with your delivery. You can check directly on the site to determine if these are legitimate. For example, you can go to the USPS or FedEx sites and enter the tracking information you received from the seller. If you are having trouble, a phone call using the contact number on the official site is a safe way to go.
Key take aways: Do not ever respond to or click links from a text message you’re unsure about. If you have concerns of legitimacy, call the company or person directly. Do not use the links or phone numbers listed in the text message.
