A text message scam is a fraudulent scheme delivered via SMS (Short Message Service) that uses deceptive text messages to trick recipients into revealing personal information, clicking malicious links, or transferring money to attackers.
Text message scams, also known as smishing (SMS phishing), represent one of the fastest-growing threat vectors in cybersecurity. The FTC fraud report found that texts are now used in 23% of fraud attempts, more than any other contact method.
How Text Message Scams Work
Text message scams send fraudulent text messages to victims, urging them to click on malicious links or provide personal information. These scams target individuals or businesses to steal money, sensitive data, or a combination. Smishing attacks operate through deceptive text messages that use social engineering tactics to trick victims into revealing personal information or performing actions that compromise their security.
Why Text Message Scams Are Effective
Text message scams work because there aren't effective filters for SMS messages compared to email servers. Criminals can easily create and impersonate phone numbers using VoIP to text any number. Mobile carriers don't have robust spam filters, allowing malicious text messages to get delivered. Additionally, people tend to trust text messages more than emails, as SMS is associated with personal communications.
Common Types
Common text message scam types include: fake banking alerts claiming suspicious account activity, package delivery notifications requesting confirmation of personal details, IRS or government impersonation demanding immediate payment, prize or lottery notifications, urgent account verification requests, and two-factor authentication bypass attempts.
Prevention
Organizations and individuals can protect against text message scams by not clicking links in unsolicited messages, verifying communications through official channels, never providing sensitive information via text, enabling spam filtering where available, and reporting suspicious messages to carriers and relevant authorities.