What is smishing? How to spot scam texts

You’ve almost certainly had one: a text about a “missed delivery”, an “unusual payment”, or a family member texting from a new number needing money. That’s smishing — phishing delivered by SMS — and it works because a text feels more personal and urgent than an email. Here’s how to see through it.

Why texts are such effective bait

People trust texts more than emails and read them faster, often on a small screen where a dodgy link is harder to inspect. Scammers exploit that with short, urgent messages that push you to tap before you think. The goal is always the same as email phishing: get you to a fake page or to hand over information.

The common scripts

A few templates account for most smishing:

• A parcel “couldn’t be delivered” — pay a small fee or confirm details via this link.
• Your bank spotted “suspicious activity” — verify your account now.
• A family member on a “new number” who urgently needs money.
• You’ve “won” something, or there’s a refund waiting, if you just click.

How to handle them

The one rule that beats them all: don’t act on the text’s link or number. If it claims to be your bank or a courier, go to their official app or website directly and check there. Never send money or codes based on an unexpected text. Don’t reply — even “STOP” confirms your number is live. Just delete it, and report it to your carrier if you can. This is the same principle as our phishing email guide: use your own route, never theirs.