MY ONE BLOGby Manishdai
Cybersecurity

What is Smishing?

Quick answer

Phishing carried out through SMS or other text messages, tricking people into clicking malicious links or sharing personal information.

Smishing, explained

The word smishing combines SMS and phishing. Attackers send text messages that appear to come from banks, delivery companies, government agencies, or employers, usually with an urgent request: confirm a payment, pay a small customs fee, or verify an account. The link leads to a fake website that collects passwords or card details, or prompts the user to install malicious software.

A common example is a message claiming a parcel could not be delivered and asking the recipient to pay a redelivery fee through a link. Smishing works because people tend to trust text messages and phone screens make suspicious web addresses harder to spot. To stay safe, avoid tapping links in unexpected messages, check directly with the company through its official app or website, and report scam texts to your mobile carrier.

Related terms

Phishing

A social engineering attack that uses fake emails, messages, or websites to trick people into revealing information or installing malware.

Vishing

Voice phishing, a scam in which attackers use phone calls or voice messages to trick people into revealing information or sending money.

Guides that mention Smishing