Smishing (SMS phishing)
Quick answer
Smishing is phishing carried out through SMS text messages, often impersonating delivery companies, banks, or government agencies.
- Check directly with the carrier, bank, or agency using their official website or app.
What it is
Smishing is phishing carried out through SMS text messages, often impersonating delivery companies, banks, or government agencies.
How it works
A short text creates urgency about a parcel, payment, or account and includes a link to a fake site that collects your details.
Red flags to watch for
- Unexpected text about a delivery, fine, or account
- A shortened or odd-looking link
- A request to pay a small fee
- Pressure to act within hours
Example
A text says your parcel could not be delivered and asks for a small redelivery fee through a link. This is risky because fake delivery fee texts are used to steal card details.
What not to do
- Do not tap the link
- Do not pay any fee
- Do not reply
The safe next step
Check directly with the carrier, bank, or agency using their official website or app.
Often seen on: SMS.
Commonly targets: Mobile phone users, Online shoppers.
How to verify safely
- Do not use links, phone numbers, QR codes, or email addresses from the suspicious message.
- Open the official app or website yourself - type the address manually.
- Call a contact you have saved, or the number printed on your bank card.
- If you are threatened or in immediate danger, contact local emergency services or police.
How to report it
Forward scam texts to your country's reporting number (for example 7726 in several countries).
Find official links for your country in the scam reporting directory.
Got a message like this?
Check it now to see the specific red flags and what to do next.
Check a messageRelated scam types
Frequently asked questions
What is a smishing (sms phishing)?
Smishing is phishing carried out through SMS text messages, often impersonating delivery companies, banks, or government agencies.
How can I avoid a smishing (sms phishing)?
Check directly with the carrier, bank, or agency using their official website or app.
What should I do if I have already been affected?
Contact your bank or the relevant provider through official channels, change any exposed passwords from a trusted device, and save evidence. See our recovery guides, and be wary of recovery scams that promise to get your money back for a fee.