Recognizing and Avoiding Suspicious Text Messages (Smishing)

Phishing attacks that use text messages, also known as "smishing," are becoming increasingly common. These messages are designed to trick you into giving away personal information by creating a sense of urgency or curiosity. Common examples include fake bank fraud alerts, package delivery notifications, or promises of prizes.

For instance, you might get a text that says: "We have detected unusual activity on your account. Please click the link to verify your transactions: [malicious link]." Another popular smishing attempt involves a message claiming a package delivery has failed and requires you to click a link to reschedule. The goal is to get you to click a link that leads to a fake website, where your login details or financial information can be collected.

How to Identify a Smishing Attempt:

• Unexpected Contact: Be cautious of messages from companies or individuals you do not normally communicate with via text. Legitimate companies will typically not ask for sensitive information through a text message.
• Sense of Urgency: Smishing messages often try to rush you by claiming your account is locked or that you will miss a delivery if you do not act immediately.
• Suspicious Links: Before clicking, examine the link. Scammers often use URLs that are slightly different from official websites. On most phones, you can press and hold the link to see a preview of the web address without opening it.
• Vague Language: The message may use a generic greeting like "Dear customer" instead of your name.
• Requests for Information: A real bank or service provider will not ask you to provide passwords, PINs, or your Social Security number in a text message.

What to Do If You Receive a Suspicious Text:

• Do Not Click or Reply: Interacting with the message can confirm to the sender that your number is active.
• Verify Independently: If the message claims to be from your bank or a company you do business with, contact them directly using their official website or a phone number you know is legitimate. Do not use the contact information provided in the text.
• Block the Number: Most smartphones allow you to block unknown numbers to prevent future messages.
• Delete the Message: Once you have confirmed it is a scam, remove the message from your phone.