What is a Smishing Scam and Why You Are Vulnerable

What is a Smishing Scam and Why You Are Vulnerable

What is smishing?

Smishing is a term used to describe the act of sending unsolicited and unwanted phishing text messages (SMS or MMS or via other message applications).

The growing popularity of text messaging

Text messages or SMS are growing in popularity among retailers to bypass bloated email inboxes. Customers are often asked to sign up for SMS alerts for shipment tracking and notifications. These kinds of texts are convenient; however, cybercriminals are also jumping onto the bandwagon to send out phishing messages via text messages.

In the first six months of 2021, smishing rose by 328% and is fast becoming a major problem.

Popular Smishing Scam to Watch Out For

Smishing is very dangerous because many people are not aware of it. People think that only legitimate companies or contacts can reach them through their mobile numbers.

This is not the case as mobile numbers are easily available through legitimate and illegitimate methods. Mobile numbers are easily available for purchase online. Data breaches expose customer details, and they are easily up for grabs on the Dark Web.

According to SafetyDetectives.com, less than 35% of the North American population knows what smishing is.

Phishing email scams are evolving into SMS scams that may look different and are harder to detect. The key differentiation between email scams vs SMS scams:

1. Inability to check the sender

You will not be able to cross-check the sender as you will not have the phone number of the retailer sending the shipping updates. Emails are easier to check as you can instantly verify the sender through the sender’s email address.

2. Inability to check links or websites

Most text messages use shortened URLs which can be used to mask the real URL. You are not able to hover over it to check the URL before clicking. There is no way to check the website unless you click on it.

3. Urgency

Scammers use urgency as bait to make you take quick action. As you panic and have your guard down, you are more likely to fall into the scam.

Popular Phishing Scam

Delivery Issues

This smishing scam leverages well-known shippers like DHL, FedEx and UPS. You will get an SMS notice that your package has been held up for delivery because it needs more details.

A link will take users to a form that captures personal information used for identity theft. A popular tactic is to request a small monetary payment to release the package. The website is used to capture your credit card information.

Fake Appointment Scheduling

An appointment notice may be sent to you with the wrong address or information. This is to get you to quickly respond and correct the information. It may require you to text back with the correct information or click on a link to send them the right details. This is a classic method to get your personal information.

Get A Free Gift

A recent smishing scam is a text message that doesn’t say who it is from. It will just say “Thanks for your recent payment. Here is a gift for you”. At the bottom of the message is a link to fill up your details to claim your gift.

This is a widespread scam as the scammer uses a common fact as bait. Most people would have made some type of payment recently and will think that it is from a company that they know.

Mobile Device with Security

Smishing scams are very smart. Besides stealing your information, it can easily infect your device with malware. Do you have sufficient security measures such as mobile antivirus, DNS filtering, etc. on your mobile devices? Give us a call on 1300 440 444 for advice on getting started today.