Smishing Text Message Scam

Phishing conducted over SMS text message, often impersonating a delivery service, bank, or government agency with a link to a fake site designed to steal login credentials or payment information.

A text message impersonates a delivery company, bank, or government agency and includes a link claiming there's a problem to resolve — an undeliverable package, a locked account, or an unexpected charge. Tapping the link leads to a fake website designed to look like the real company's site, where the victim is prompted to "log in" or enter payment details, handing their credentials or card number directly to the scammer.

• An unexpected text about a delivery, bank issue, or bill with a link to click.
• The link uses a shortened or unfamiliar URL rather than the company's real domain.
• Poor grammar, odd spacing, or a sense of urgency in the message.
• A request to enter a password or one-time code on the linked page.

• Don't tap links in unexpected text messages, even if they look official.
• Go directly to the official app or website instead of using a link from a text.
• Forward suspicious texts to 7726 (SPAM) to report them, then delete.
• Never enter a one-time passcode on a page you reached through a text link.