Skip to main content

Defend Your Data: Know the signs of “smishing," or scams conducted by text message

graphic for Information Technology Services, white letters on blue background with gold diagonal

During National Cybersecurity Awareness Month, Information Technology Services encourages you to keep your personal information safe by knowing the warning signs of a smishing text. Smishing is similar to phishing emails; it’s an attempt to steal your information, but it uses text messages instead of email. 

Smishing texts often appear to be from a bank, credit card company or shipping company, and ask you to address an issue immediately by clicking on a link. Sometimes they try to make you think you won a prize. Here are some things to watch for:  

They are unexpected. Be suspicious of texts that come from an unknown number or arrive unexpectedly.  

The message is threatening or urgent. Smishing texts often ask you to do something immediately. Example “Your ABC Bank account has been suspended. To unlock your account, tap here: https://bit.ly/2LPLdaU” 

The message includes links, a number to call or software to install on your phone. Short messages that include a link, such as “Is this really a pic of you? https://bit.ly/2LPLdaU” are trying to trick you into downloading malware. 

How can you guard against smishing scams?  

Avoid responding to unexpected messages from unknown senders. If Amazon texts you about winning a prize, check your Amazon account and your primary email account for a similar message. If in doubt, call the Amazon customer service number on their website to confirm. Never click on the link provided in the text. 

Never click on links. Beware of links that are hidden by URL shorteners or text like “Click Here.” These links are most likely designed to steal your credentials or download malware onto your phone. 

Only install apps from credible sources like Apple App Store or Google Play Store. Never click on a link within a text to download a new app. 

Protect your personal data. No legitimate company would contact you for sensitive data like a bank number, account password or credit card number. They already know that information. 

If you think you have fallen for a smishing scam, report it to law enforcement and file a complaint with the FCC here

For more ways to keep yourself and your devices safe, search "Defend Your Data" in ENEWS