Free SMS Scam Checker

What Is SMS Phishing (Smishing)?

SMS phishing, called "smishing", is fraud where criminals send deceptive text messages to steal personal information, money, or account access. The term combines "SMS" and "phishing."

Smishing has grown dramatically and is now one of the most common forms of cybercrime targeting everyday people. Unlike email phishing, text messages tend to feel more personal and urgent, people are more likely to act quickly on a text before stopping to verify its legitimacy.

Scammers impersonate banks, delivery services, government agencies, and retail companies. Their texts are often well-crafted, use real company names, and create urgency designed to stop you from thinking critically before acting.

The Most Common SMS Scams Right Now

ScanTotal's analyzer detects over 15 categories of SMS scam patterns. The most prevalent include:

• Fake parcel delivery notifications: "Your package could not be delivered. Update your delivery preferences: [link]", impersonating Australia Post, DHL, FedEx, or Amazon. The link leads to a fake site requesting credit card details.
• Bank fraud alerts: "ALERT: Unusual activity on your account. Verify your details immediately: [link]", impersonating major banks. The fake login page captures your banking credentials.
• Government agency impersonation: Texts claiming to be from the ATO, MyGov, Medicare, or Centrelink, often claiming you have a tax refund or outstanding debt requiring immediate payment.
• Prize and lottery scams: "Congratulations! You've won a $500 gift card. Claim before it expires: [link]", leads to sites that require personal information or payment to "release" a non-existent prize.
• Verification code theft: "Your verification code was requested. If this wasn't you, click here to secure your account.", tricks you into sharing two-factor authentication codes.
• Toll and fine notices: Fake messages claiming an outstanding road toll or traffic fine requiring urgent payment to avoid additional penalties.

How to Tell If a Text Is a Scam

While ScanTotal gives you instant analysis, knowing the warning signs helps you identify scams without a scanner:

• You weren't expecting the message. If you didn't place an order or request a code, any text claiming to be a follow-up should be treated with suspicion.
• The message creates urgency. Legitimate organizations do not threaten immediate account closure or legal action if you don't click a link within hours.
• The link doesn't match the sender's domain. A text from "Australia Post" containing a link to "auspost-deliveries.com" (not auspost.com.au) is fraudulent.
• It asks for personal or financial information. Legitimate companies do not ask for credit card numbers, passwords, or tax file numbers via text message.
• The number looks unusual. Random long numbers, international numbers, or numbers that change frequently are red flags.