We have all received them: a text about a "missed delivery," a "suspicious login" to our bank, or a "family member in trouble." These are called Smishing (SMS Phishing) scams.

Because we tend to trust our text messages more than our emails, smishing is becoming one of the most successful ways for scammers to steal data and money.

Here are the 5 most common smishing traps and how to spot them.

1. The "Delivery Issue" Scam

"Your parcel has a $2.99 unpaid shipping fee. Failure to pay will result in the package being returned."

The Trap: Scammers use brands like Australia Post, DHL, or UPS to trick you into clicking a link and entering your card details. Once they have your info, they sign you up for expensive monthly subscriptions or make large unauthorized purchases.

2. The "Hi Mum/Dad" Scam

"Hi Mum, I dropped my phone and it's broken. This is my new temporary number. Can you help me pay a bill?"

The Trap: This is a high-emotion scam targeting parents. The scammer builds a sense of urgency and panic, hoping you'll send money via wire transfer or a payment app before you realize you haven't actually spoken to your child.

3. The "Account Verification" Alert

"Your [Bank Name] account has been temporarily locked due to unusual activity. Verify your identity here: https://secure-bank-access.net"

The Trap: Banks almost never send clickable links for security verification via SMS. The link leads to a perfect replica of your bank's login page, where scammers steal your username, password, and even your 2FA codes.

4. The "Unpaid Road Toll" Notice

"eFlow Notice: Our records show you have an unpaid toll from your last journey on the M50. Pay now to avoid a £50 fine."

The Trap: This scam relies on the high probability that you have recently used a toll road. By using the threat of a large fine, they pressure you into paying a small "toll" on their fake website.

5. The "Government Grant/Refund" SMS

"myGov: You are eligible for a one-time cost of living rebate of $250. Claim your refund here."

The Trap: Government agencies (like the ATO or myGov) will almost never send a text with a link to claim a refund. They will instead notify you via their secure internal inbox or mail.

How to Stay Safe from Smishing

Check the sender number: While scammers can spoof names, many smishing messages come from random international numbers (e.g., starting with +62, +234).
Never click the link: This is the golden rule. If you think the message might be real, go directly to the company's official website or app to check your status.
Look for "Reply Y" or "Reply Yes": This is a tactic used to make links clickable on certain phone operating systems. Treat it as an immediate red flag.
Report and Block: Forward the message to your network's spam reporting number (usually 7726) and then block the sender.

Summary

If a text message is asking you to click a link, pay money, or share a code, it is almost certainly a scam. Slow down, ignore the urgency, and verify the claim independently.

Stop Guessing. Know if it's a scam instantly.

Join thousands of users who trust IsThisSpam to automatically analyze suspicious emails, links, and messages before they do any harm.

Create Free Account for Private Scans Get Chrome Extension