Smishing
Understand what 'smishing' fraud entails and how to protect yourself from suspicious messages.
What is 'smishing'?
Smishing is a type of 'phishing' fraud where criminals send fake or deceptive text messages to trick people into clicking malicious links.
The aim of a fraudulent message – whether it’s sent by SMS, WhatsApp or other messaging service is to direct to a fake website that can steal your data and money or infect your device with a virus.
Phishing text message checklist: what to look for
Fake texts are often short and simple, but the fraudsters use cunning tactics to make them believable. They can even ‘spoof’ the mobile number they message from, so it appears in the same thread as a genuine contact such as your bank.
However, there are a number of signs that the message might be fake, so here’s how to spot a suspicious message.
Be wary if you see:
- an ‘irresistible’ product offer or prize from a number or company you don’t know
- an urgent alert about security, for example your bank account details have been compromised
- a message about a product or service you haven’t purchased or requested
- a delivery company demanding you pay a fee before they deliver a parcel
- an appeal from a family member asking you to send money
- encouragement to click on an unknown link – if you’re not sure, visit the organisation’s website directly rather than clicking through
- a request for you to share personal data
- language designed to create a sense of urgency or panic
- messages sent outside normal business hours, especially if they’re very late at night or very early in the morning
What to do if you suspect fraud
If you’ve seen something that doesn’t feel right, STOP!
Break the contact: don’t reply, click on any links or make any payments.
Check if it’s genuine: contact the person or company directly, using a phone number you already have and know is correct.
Forward the message to 7726 (it’s free of charge).