Smishing (SMS Phishing) is phishing via text. It has exploded because open rates for texts (98%) dwarf email (20%).
Why Smishing Works
No Filters: SMS lacks the sophisticated spam filters of email.
Small Screens: URL Inspection is difficult on mobile devices.
Urgency: Texts feel immediate, prompting quicker reactions.
Common Scams
1Delivery
'Your package is held at the warehouse. Click to update delivery details.'
2Bank Fraud
'Did you spend $1200? Reply NO.' (Replying triggers a fake support call).
3MFA Theft
'Your code is 123456.' (Attacker uses this to bypass your 2FA).
How to Spot a Smish
Unknown Number: Random 10-digit number instead of a verified shortcode (5-6 digits).
Weird Links: bit.ly or random strings instead of ups.com.
Bad Grammar: Official automated alerts rarely have typos.
Key Takeaway
"Treat your texts like your inbox. If you didn't request a message (like a password reset), assume it is fake."
