SMS scams are one of the many ways criminals can trick people into compromising their information, sending money to third parties, or compromising their device.
This type of scam is one of the harder ones to filter out since it bypasses spam filters and security software by sending messages directly to someone’s phone. But there are ways to keep yourself safe from SMS scams.
What is smishing?
Smishing, also known as SMS phishing, is a type of scam where criminals impersonate a utility service, bank, government agency, or trusted organisation to get sensitive information or trick people into sending them money.
These messages may come from unknown numbers or appear like they’re from official sources. These SMS scams rely on social engineering techniques that pressure their victim to act before thinking.
The scam messages will often include a malicious link that leads users to a fake website where they’re prompted to input their information, which will be sent to the scammer.
What are the common smishing scams?
Smishing scams vary in presentation, with some being more obvious than others. The messages themselves vary and change constantly. To avoid falling victim to such scams, it’s best to understand some basic scam tactics so you can identify them more easily.
Here are the common types of smishing scams:
Order smishing or outstanding invoice smishing
When you order something online or subscribe to a service, you’ll usually get a notification text about the transaction. Scammers use this as an opportunity to create a fake order confirmation or billing invoice. They may add a link to the text prompting you to click or false billing information to get you to send money.
Financial services smishing
This involves texts claiming to be from financial institutions like banks, lenders, and brokers. Because most people have bank accounts, active credit cards, or loans, scammers can cast a wider net when using this type of smishing scam.
The messaging of these scams is often quite urgent, claiming that your bank account has been compromised, and you must act now by clicking a link or sending your bank information. A smishing scam posing as a lender may offer you a low-rate loan and is only asking for your personal and financial information.
Account alert smishing
In this type of smishing scam, you’ll receive a message saying your account has been compromised or suspended for unusual activity with a link attached that leads you to a spoofed login page. The goal here is to get you to log in from the fake page so hackers can steal your credentials.
Wrong number smishing
Victims will receive seemingly genuine accidental texts from unknown numbers designed to start conversations. If you reply to these messages, the scammer will continue the conversation. The goal of these scammers is to build trust and, over time, lure victims into putting money in fake investment schemes or turn it into a romance scam.
Multi-factor authentication or password reset interception smishing
Scammers will send out fake prompts requesting users to input their one-time password (OTP) or click a link to reset their password. If you receive a message like this unprompted, it’s best to ignore it and double-check your account’s login history to see if there are any attempts you don’t recognise.
Gift or prize smishing
Another way scammers entice people into interacting with their texts is by offering a fake prize where you need to send money to claim your supposed winnings. This can come in the form of giveaway contests, raffles, or shopping rewards claiming to be from your bank or other established institution.
What are the signs of a smishing scam?
Aside from knowing the common smishing tactics used, you can also identify an SMS scam by a few telltale signs:
- It has poor grammar and spelling mistakes. The most obvious sign that the text you received is an SMS scam is if it’s littered with errors. Pay attention to the message itself and don’t respond to these texts.
- It demands you act immediately. Texts that imply that there will be dire consequences if you don’t act are a clear sign of a smishing scam. Don’t interact with these texts. It’s best to ignore them and block the number when you have confirmation that it is a scam.
- It has a link attached. It’s unlikely for your bank, lender, or service provider to send you a message asking you to click a link. These links could lead you to fake websites or install malicious software on your device. Even if the text says it’s from an established organisation or business, it’s best not to click on any links unless you have verified the source and it is safe to do so.
If you’re unsure if a text message is a scam or not, it’s best not to act immediately. Take a breath and analyse the context of the message. If it’s from your bank, lender, or service provider, call them directly using official hotlines or customer service channels to verify the texts.