security

Everything You Need To Know About Smishing (SMS Phishing)

March 20, 2025

Handling Smishing Situations & Best Practices for Smishing

Scammers are always finding new ways to steal information. One of the common scams today is smishing. This is a type of phishing that happens through text messages. The messages may look like they come from a trusted company, like your bank or a delivery service.

Sometimes, they even claim to be from the government. For example, U.S. Postal Service scams are on the rise in Indiana.[1] If you’re not careful, you could give scammers access to your personal and financial information.

This guide will explain what smishing is, how scammers use it, how to recognize a fake message, and an education of what to do if you receive one.

What Is Smishing?

Smishing is a scam where criminals send fake text messages to trick you into giving away personal details. The word “smishing” combines SMS (text messaging) and phishing (a scam that steals personal data).

These messages may ask you to:

Click a link that takes you to a fake website
Call a phone number where scammers pretend to be a real company
Provide personal details like your Social Security number or bank login information

Smishing scams try to make you act fast. They often create a sense of urgency. If you react without thinking, you could become a victim.

You might also like: What Types of Internet Frauds Are Most Common Online?

How Scammers Use Smishing To Attack You

Scammers use smishing in different ways.

Some of the most common scams include:

Fake bank alerts. A text claims there is a problem with your account. It asks you to confirm your personal details.
Delivery scams. A message says a package couldn’t be delivered. It asks you to click a link to reschedule.
Government impersonation. A scammer pretends to be from the IRS or another agency. They say you owe money or must verify your identity.
Tech support scams. A message claims your phone or account has been hacked. It urges you to take immediate action.

If you receive a text message that falsely represents one of the above, it could be smishing.

What is Smishing: Smishing Example

A smishing text might look like this:

"Your Centier Bank account has been locked due to suspicious activity. Click here to restore access: [fake link]."

If you click the link, you may be taken to a website that looks just like your bank’s real site. The site may ask you to enter your username, password, or other details. If you do, scammers can use that information to steal money or commit identity theft.

Smishing Explained: Common Signs of a Smishing Message

In 2023, Indiana cybercrime victims lost $162.3 million, ranking 20th nationwide. Plus, nearly half of U.S. victims were 60+, facing losses over $770 million.[2] It can be hard to tell if a text message is real or fake. But there are some warning signs to watch for.

You might also like: Identity Theft for Seniors: Learn To Recognize and Prevent Fraud

The Message Creates a Sense of Urgency

Scammers want you to panic. They use words like “urgent,” “immediate action required,” or “your account will be locked.” This is a fraud trick to make you act without thinking.

The Text Contains a Suspicious Link

Real businesses do not ask you to verify your account through a text link. If a message includes a shortened URL or a web address that looks strange, do not click it.

The Sender’s Number Looks Unusual

Legitimate companies usually send texts from a short code (a five- or six-digit number) or a verified sender name. If a text comes from a long, random phone number, it may be fake.

The Message Asks for Personal Information

Banks and government agencies will never ask for passwords, PINs, Social Security numbers, or account numbers through text messages.

The Text Contains Spelling or Grammar Mistakes

Many smishing messages have odd wording, typos, or bad grammar. If a message looks poorly written, it is likely a scam.

What To Do if You Receive a Smishing Text

If you get a suspicious text, follow these steps.

1. Do Not Click Links or Reply

Even if the message says “Reply STOP to unsubscribe,” do not respond. Replying confirms your number is active. Scammers may send you more messages.

2. Verify the Message

If the text claims to be from your bank, a delivery service, or another business, contact the company directly. Use a phone number from their official website, not the number in the text.

3. Block the Sender

Most smartphones allow you to block numbers to prevent future messages from that sender.

4. Report the Smishing Scam

You can help stop scammers by reporting smishing texts.

To report to your mobile carrier, forward the message to 7726 (SPAM).
To report to the Federal Trade Commission (FTC), file a report at ReportFraud.ftc.gov.
If the scammer pretends to be from your bank, let them know by contacting your bank directly.

5. Monitor Your Accounts

If you clicked a link or shared personal information, check your bank statements and credit reports for unusual activity. If you think your account was compromised, contact your bank right away.

How To Protect Yourself from Smishing

While scams are always evolving, you can take steps to protect yourself from smishing attacks.

1. Be cautious With All Text Messages

If a message seems unusual, pause before taking action. Scammers try to make you react quickly. Take your time and verify the source.

2. Avoid Clicking on Links in Texts

If a company needs you to take action, go directly to their official website instead of clicking a link. You can type the web address into your browser.

3. Never Share Personal Information Over Text

Banks, government agencies, and legitimate companies will never ask for passwords, PINs, or sensitive details through text messages.

4. Use Two-Factor Authentication (2FA)

Enable 2FA for your bank accounts and other important logins. This adds an extra layer of security. Even if scammers get your password, they won’t be able to access your account without the second factor.

5. Keep Your Phone’s Software Updated

Updating your phone’s software helps protect against malware and security threats. Turn on automatic updates if possible.

You might also like: How To Create Strong Passwords for Online and Mobile Banking App

Protect Your Assets With Centier by Your Side

Smishing is a growing threat, but you can protect yourself by knowing the warning signs and taking the right steps.

If you receive a suspicious text:

Don’t click.
Don’t reply.
Report it immediately.

Stay informed and stay safe. If you want to take extra steps to secure your financial future, explore Centier's security and fraud-prevention resources.

Sources:

[1] https://wkdq.com/usps-scams-on-the-rise-in-indiana-heres-what-you-need-to-know/

[2] https://www.purdueexponent.org/news/state/how-cybercrime-losses-in-indiana-compare/collection_67077b08-6e15-581a-bf80-53cac2ccd08e.html#2