Smishing
Updated 2026-09-29
Smishing is phishing carried out through SMS text messages rather than email. A typical smishing message impersonates a bank, courier service, or government agency, often creating urgency, such as claiming a parcel is stuck or an account will be suspended, to push you into clicking a link.
When it matters
If you clicked a link in a suspicious SMS and entered any details, treat it the same way as email phishing: change passwords, watch your bank account closely, and consider whether an APK file was also involved if you were asked to install something. Do not call numbers given in the message itself; look up your bank’s number independently instead.
Read next
APK scam: what to do right now
If you installed an app from a link and your phone or banking now looks wrong, here is what to do in the next few minutes to limit the damage.
Read thisBusiness email compromise: what to do
A supplier or director email asked you to pay a changed bank account. Here is how business email compromise works and the fastest response.
Read thisCrypto scam: what you can do
If a crypto exchange or wallet blocks your withdrawal after you met the operator on a chat app, here is how to trace what happened and what to do next.
Read thisWhat to do right after a scam
If you just realised you sent money to a scam, here is the order of first actions: stop paying, call your bank, call 997, and report it.
Read this