By: Vanna karthik; Vel Tech University, Chennai, India
Abstract
Combining the terms “SMS” and “phishing,” smishing is a dishonest tactic in which criminals utilize text messages to fool victims into disclosing personal information or downloading harmful software. Because mobile devices are so widely used and consumers trust text messages, this strategy has become more popular. Smishing is a serious risk since it frequently targets private data, such as bank account information and identifying information. The article examines the idea of smishing, highlighting key characteristics, operational procedures, and typical attacker strategies. The study also offers advice on how to spot smishing attempts and steer clear of them. The paper summarizes the body of knowledge on the topic and offers doable steps that people and organizations may take to protect themselves against such attacks. Users may protect themselves from potentially dangerous outcomes by being aware of smishing and putting preventive measures in action.
Introduction
Communication and information access have become much more convenient with the rise of mobile technologies. Smishing is one of the new weaknesses it has brought about, though. One type of phishing that uses text messages to target people is called smishing. Smishing takes advantage of the widely used and quick nature of SMS to take advantage of inexperienced consumers, in contrast to traditional phishing, which mostly takes place over email. Smishing has become a much greater risk as people depend more and more on mobile devices for both personal and professional communication[1]. This essay seeks to examine the characteristics of smishing, examine its effects, and offer practical advice on how to identify it and stay clear of it. This study aims to increase awareness and provide users with the information they need to successfully defend against these attacks by analyzing the workings of smishing and how it affects people.
Literature review
What is smishing ?
Smishing is it that combines the words “SMS” (short message services, also known as texting) and “phishing,” as the definition indicates. Smishing can also be defined as a form of attack using social engineering that leverages human trust instead of technical weaknesses[2].
How to spot smishing?
According to the resources of[4]
The phone number that sent the text seems odd. Verify whether the text message was sent from a number listed in your address book. You should also be cautious of texts that don’t follow the standard 10-digit pattern.
There is a questionable connection in it. Links that are shortened, hidden, or don’t point to an official domain are all part of scam SMS messages. A fake letter claiming to be from Apple, for instance, might link to “Apple-customer-support.com” or another spoof website.
There are formatting, grammar, and spelling errors. Scammers may use odd vocabulary, grammar, and style in their texts because they are not usually native English speakers.
Requests for funds or information are included in the text. Before making a payment, phone your loved ones to confirm when you receive a money request via Paytm or Cash App. Always get in touch with your banking institutions immediately to confirm any SMS you get.
If you click on a link, a reward or award is promised. It’s most likely a scam if you get a message on social media claiming that you’ve won a giveaway or that you were chosen at random from a group of subscribers to win a gift card. A connected link is probably a smishing text, therefore avoid clicking on it.
How to avoid Smishing ?
The good news is that it’s simple to defend against the potential negative effects of these attacks. You don’t need to do anything to protect yourself. Essentially, the attacks are only effective if you fall for the trap. However, keep in mind that many institutions and retailers can legitimately contact you by text messaging. Even if you should not ignore every message, you should always take precautions. by using resource[2].
To help you defend yourself against these attacks, there are a few things to remember.
Don’t answer : Even response instructions, such as texting “STOP” to unsubscribe, can be used to find current phone numbers. You can choose not to participate, but attackers rely on your interest in or fear of the current situation.
If a message is urgent, slow down : Limited time deals and urgent account changes can be viewed as warning indicators of potential smishing. Proceed cautiously and with mistrust.
Call your bank or merchant directly if doubtful: Reputable organizations never send text messages asking for login credentials or account changes. Additionally, you can confirm any urgent notifications by calling an official contact phone number or immediately on your online accounts.
Download an anti-malware app : to protect your devices to install anti malware app.
Methodology
This study combines a survey of literature with a qualitative analysis of the body of research Smishing attacks . and give some tips to identify and avoid smishing.
Conclusion
In modern times, smishing poses a serious risk since it takes advantage of the quickness and trust that come with SMS messaging. Being aware of unwanted texts that ask for personal information or demand immediate action is essential to spotting smishing attempts. Verifying the source of communications, utilizing security software, and keeping up with typical scams are important ways to prevent smishing. Furthermore, increasing user awareness and education is essential to decreasing the strength of these attacks. People and organizations can lessen the risk to smishing attacks by implementing these precautions. In order to address the growing threat of smishing and ensure that users may securely navigate the digital communication landscape, the paper finds that a mix of technology solutions and informed user behavior is required.
References
- R. E. Ulfath, I. H. Sarker, M. J. M. Chowdhury, and M. Hammoudeh, “Detecting Smishing Attacks Using Feature Extraction and Classification Techniques,” in Proceedings of the International Conference on Big Data, IoT, and Machine Learning, Springer, Singapore, 2022, pp. 677–689. doi: 10.1007/978-981-16-6636-0_51.
- “What is Smishing & How to Defend Against it,” /. Accessed: Jan. 06, 2025. [Online]. Available: https://www.kaspersky.com/resource-center/threats/what-is-smishing-and-how-to-defend-against-it
- E. Lichterman, “6 Steps to Prevent Smishing Attacks,” CybeReady. Accessed: Jan. 06, 2025. [Online]. Available: https://cybeready.com/the-complete-guide-to-smishing/steps-to-prevent-smishing-attacks
- “What is Smishing? How To Spot & Avoid The Latest Text Scams.” Accessed: Jan. 06, 2025. [Online]. Available: https://www.aura.com/learn/smishing
- Ajmal, M. S., Iqbal, Z., Khan, F. Z., Ahmad, M., Ahmad, I., & Gupta, B. B. (2021). Hybrid ant genetic algorithm for efficient task scheduling in cloud data centers. Computers and Electrical Engineering, 95, 107419.
- Chui, K. T., Gupta, B. B., Alhalabi, W., & Alzahrani, F. S. (2022). An MRI scans-based Alzheimer’s disease detection via convolutional neural network and transfer learning. Diagnostics, 12(7), 1531.
- Gokasar, I., Pamucar, D., Deveci, M., Gupta, B. B., Martinez, L., & Castillo, O. (2023). Metaverse integration alternatives of connected autonomous vehicles with self-powered sensors using fuzzy decision making model. Information Sciences, 642, 119192.
- Bharath G. (2025) Cloud-Based Phishing Attacks: How Cybercriminals Exploit SaaS and IaaS Weaknesses, Insights2Techinfo, pp.1
Cite As
Karthik V. (2025) What is Smishing? How to Spot and Avoid it, Insights2techinfo pp.1