How to Spot Smishing Text Messages
Spot smishing texts about deliveries, tolls, and account alerts, verify requests safely, and know what to do after opening a suspicious message link.
Recognize the common setup
Smishing is phishing delivered through text messages. A message may mention an unpaid toll, a missed delivery, a bank alert, or an unexpected refund. The goal is often to move you onto a fake website or start a conversation. A familiar sender label or an existing message thread does not guarantee authenticity. Unexpected requests deserve a separate check, even when the wording sounds routine.
Use the official app or website
Do not use the message link to investigate a claimed problem. Open the delivery, bank, or toll provider's official app yourself. You can also type a known website address or call a verified number. Check whether the claimed transaction or notice actually appears there. If you cannot identify the organization or confirm the request, do not provide payment details or identity documents.
Do not continue the conversation
Avoid replying to suspicious messages, including with a request to stop. Use your phone's reporting and blocking options when available. Do not install apps, configuration profiles, or remote support tools at a stranger's direction. Never share a verification code to cancel a supposed fraudulent transaction. If a text appears to come from someone you know, contact that person using a number already saved in your contacts.
Take proportionate action after a click
Opening a link does not by itself establish that your phone is compromised. Close the page and do not continue. If you entered credentials or payment details, contact the real provider and replace the exposed information as appropriate. If you installed anything, review it and seek trusted technical help when needed. Keep iOS updated, save relevant evidence, and report financial losses to the appropriate institution.