Smishing is a type of cyber attack that uses text messages (SMS) to trick individuals into revealing personal information, such as passwords, credit card numbers, or other sensitive data. The word “smishing” is a combination of “SMS” (Short Message Service) and “phishing.”

You receive a text message that appears to be from a trusted source, such as your bank, a delivery company, or even a government agency. The message often creates a sense of urgency, warning you about suspicious activity on your account, a missed delivery, or an urgent need to verify your information. You are asked to click a link or call a phone number. The link may lead to a fake website designed to steal your information, or the phone number may connect you to a scammer. If you provide information, the attacker can use it for identity theft, financial fraud, or other malicious purposes.