SMS and Phone Scams: Defending Against Mobile Fraud¶
Your phone is one of the most personal devices you own, and scammers know it. Phone-based fraud, including scam calls (vishing), fraudulent text messages (smishing), and robocall schemes, has surged in recent years. The immediacy and personal nature of phone communication makes these attacks particularly effective, as people are conditioned to respond to calls and messages quickly.
Smishing: Text Message Scams¶
Smishing combines SMS with phishing to deliver fraudulent messages directly to your phone. These texts typically impersonate banks, delivery services, government agencies, or tech companies. A common smishing message might claim that your package could not be delivered, that your bank account has been locked, or that you owe unpaid taxes.
The messages include a link to a fake website designed to harvest your login credentials, personal information, or payment details. Some messages instead prompt you to call a phone number where a scammer is waiting to extract information verbally.
Smishing is especially dangerous because people tend to trust text messages more than emails. The small screen of a mobile device also makes it harder to inspect URLs and sender details carefully.
Vishing: Voice Call Scams¶
Vishing uses phone calls to deceive victims. Modern vishing has become increasingly sophisticated thanks to caller ID spoofing, which allows scammers to make their calls appear to come from legitimate organizations, local numbers, or even government agencies.
Tech support scams involve callers claiming to be from companies like Microsoft or Apple, warning you that your computer has a virus. They ask for remote access to your device or payment for unnecessary repairs.
Government impersonation scams feature callers posing as IRS agents, Social Security Administration representatives, or law enforcement officials. They threaten arrest, deportation, or license suspension unless you make an immediate payment, often via gift cards or wire transfer.
Bank fraud scams involve callers pretending to be your bank's fraud department. They claim suspicious activity has been detected on your account and ask you to verify your identity by providing account numbers, PINs, or one-time passcodes. In reality, they are using this information to access your account in real time.
AI-powered voice cloning is an emerging threat where scammers use artificial intelligence to clone the voice of a family member or friend. They call you pretending to be that person, typically claiming to be in an emergency and needing money urgently.
Robocalls and Automated Scams¶
Automated calling systems allow scammers to reach millions of phone numbers at minimal cost. These robocalls may offer fake warranties, insurance plans, debt relief, or free vacations. They often begin with a recorded message and transfer you to a live scammer if you press a button or stay on the line.
How to Protect Yourself¶
Never trust caller ID alone. Spoofing technology makes it trivial to fake the number displayed on your phone. If someone claims to be from your bank or a government agency, hang up and call the organization directly using a number from their official website.
Do not click links in unexpected text messages. If you receive a message claiming to be from a delivery service or your bank, open your browser and navigate to the organization's website directly.
Register with your country's Do Not Call list. While this will not stop criminal callers, it reduces legitimate telemarketing calls and makes it easier to identify scam calls.
Use call-blocking features and apps. Most smartphones and carriers offer built-in tools or apps that can identify and block suspected scam calls.
Never provide personal information to an inbound caller. Legitimate organizations will not ask for passwords, PINs, or full account numbers over the phone, especially on calls they initiated.
Establish a family code word for emergencies. This helps you verify that a distressed caller is actually a family member and not a scammer using voice cloning technology.
If you receive a scam call or text, report it to your carrier by forwarding the message to 7726 (SPAM) and file a complaint with the FTC or your country's telecommunications regulator.