TL;DR: Smishing is phishing carried out over SMS text message instead of email, using fake links or urgent requests to steal personal information or money. Never click links in unexpected texts. Go directly to the company's official app or website instead, and verify by contacting them through a number you already know is correct.
👉 Check my digital footprint — free 30-second check →
Smishing is phishing carried out over SMS text message instead of email, using fake links or urgent requests to steal personal information or money.
How Smishing Works
A text arrives claiming to be from your bank, a delivery company, or a government agency, warning of an urgent problem and providing a link to "resolve" it. The link leads to a fake page designed to capture your login details or payment information.
Warning Signs to Watch For
Urgency, a link that doesn't match the real company's domain, requests for personal or payment information, and a sender number that looks unfamiliar or spoofed.
How to Protect Yourself
Never click links in unexpected texts. Go directly to the company's official app or website instead, and verify by contacting them through a number you already know is correct.
If this looks similar to something else you've seen, it's worth reading What Is Spear Phishing? How It Works and How to Protect Yourself.
This pattern shows up elsewhere too — see What Is Subscription Trap Scams? How It Works and How to Protect Yourself.
Frequently Asked Questions
What is Smishing?
Smishing is phishing carried out over SMS text message instead of email, using fake links or urgent requests to steal personal information or money.
How does Smishing typically work?
A text arrives claiming to be from your bank, a delivery company, or a government agency, warning of an urgent problem and providing a link to "resolve" it. The link leads to a fake page designed to capture your login details or payment information.
What are the warning signs of Smishing?
Urgency, a link that doesn't match the real company's domain, requests for personal or payment information, and a sender number that looks unfamiliar or spoofed.
How can I protect myself from Smishing?
Never click links in unexpected texts. Go directly to the company's official app or website instead, and verify by contacting them through a number you already know is correct.
What should I do if I think I’ve encountered Smishing?
Stop responding immediately, do not click any links or share information, and report it to the appropriate authority. If money or personal information was already shared, act quickly to secure your accounts and report the incident.