What is smishing?

Updated 2026-05-03

Smishing is phishing delivered by text message. US consumers receive billions of scam texts per year — the FTC reported text messaging as the #1 scam contact method since 2022. The format works because texts feel personal, urgent, and harder to verify than email.

Common smishing campaigns

USPS redelivery, IRS tax refunds, bank 'unusual activity', toll road unpaid fees (E-ZPass, FasTrak, SunPass), FedEx/UPS package fees, and 'Hi mom/dad, I lost my phone' family-emergency transfers.

Why it's effective

Mobile screens hide URLs, urgency overrides scrutiny, and the small ask ($1.99 fee, 'just confirm your details') feels low-stakes. Once data is harvested, the real harm is identity fraud weeks later.

Defense checklist

Don't tap links in unsolicited SMS. Forward to 7726. Verify directly via the company's official app or website. Keep iOS and Android updated for the latest URL-blocking lists.

Frequently asked questions

Is replying STOP safe?

Replying to legitimate marketing texts is fine. Replying to scams confirms your number is active and invites more — don't reply, just forward to 7726.