📱
SMS Phishing (Smishing)
Fraudulent text messages impersonating USPS, FedEx, banks, or the IRS to steal credentials or install malware.
$330M+
Annual losses (US)
85,000+ annually (US)
Reported victims/year
Report Now
FTC: ReportFraud.ftc.gov
🎭 How Scammers Do It: Tactics
- ▸ Send texts impersonating USPS, FedEx, or UPS about package deliveries
- ▸ Clone bank SMS alerts claiming unusual activity on your account
- ▸ Send fake IRS tax refund notifications via text
- ▸ Include malicious links to credential-harvesting websites
- ▸ Use 10-digit phone numbers that look like US local numbers
- ▸ Ask for credit card numbers to pay "customs fees" or "redelivery fees"
🚩 Red Flags: Stop If You See These
⚠ Text from a shipping company you did not expect
⚠ Link in the message has a domain not matching the company
⚠ Requests payment for delivery via credit card through a text link
⚠ Urgent language — package will be returned or destroyed
⚠ Text claims you have a tax refund — IRS does not text
⚠ Short URL that hides the actual destination (bit.ly, tinyurl)
🛡️ How to Protect Yourself
1. Never click links in unexpected text messages
2. Go directly to the company website to track packages
3. Enable spam text filtering on your phone
4. Report smishing texts to 7726 (SPAM) on all major US carriers
5. Do not respond to suspicious texts — responses confirm your number is active
6. Use your phone carrier's scam-blocking features
📋 How to Report This Scam
Forward the smishing text to 7726 (SPAM). Report to FTC at ReportFraud.ftc.gov.