Smishing is similar to phishing but the message arrives as a text message (SMS) or, in some cases, a multimedia message (MMS) which allows the fraudster to include a logo to look more authentic. Like phishing, the texts often use language and styles that look like official business and often ask you to log in to a specific website.
For example, you may receive a text about a payment refund, but in order to claim the refund, you need to click on a link that directs you to a site where you will be asked to provide your login and account details.
What to look for
The clues for smishing are similar to phishing:
- The sender is not a recognized or trusted source. Many companies will send their SMS messages from a “short code” which has fewer digits than a normal phone number. Short codes are harder to obtain, so phishing messages are less common from short codes.
- There is limited detail in the text.
- The message is asking you to click on a specific attached link.
- The message is asking you to reply in a certain way in order to obtain more information.
- There is a shortened or vanity URL link. These are descriptive or memorable URLs that redirect to another longer and more specific URL.
- There is a sense of urgency.
- There is a promise of reward(s).
How to protect yourself
Be realistic; if it seems too good to be true, it probably is.
- Do not respond if you do not know the sender.
- Do not respond to requests for personal information such as your bank account number.
- Be aware of the companies with which you signed up for SMS/text alerts, and only trust messages that you know are from them.
Bell does not give out customers’ mobile numbers to any third-party sources unless we have prior consent from you. Furthermore, Bell employs rigorous spam filters.