World has now become a global village, cybercriminals are always coming up with new methods to exploit the unsuspecting. One of the growing scam tactics is “smishing,” a mix of SMS (text messaging) and phishing. In this scam, fraudsters send fake text messages to trick people into sharing personal information, downloading harmful software, or sending them money. Recently, the FBI has warned about a rise in smishing scams, especially ones that pretend to be road toll collection services.
What Is Smishing?
Smishing is phishing by another name, whereby cybercriminals use false text messages to trick people into doing something that weakens their security. The messages tend to be from legitimate entities like banks, delivery companies, or, as recently seen, toll agencies. The aim is to trick the recipients into clicking on harmful links, giving away sensitive information, or downloading malware.
Recent Boom in Smishing Scams
The FBI’s Internet Crime Complaint Center (IC3) has collected more than 2,000 reports of smishing messages pretending to be road toll collection services from at least three states. The scams seem to be spreading from state to state, which points to a prevalent and dynamic threat.
How the Scam Works
The fake messages usually notify recipients of unpaid tolls and instruct them to pay immediately in order to escape heavy fines. A standard scam text may say:
“(State Toll Service Name): We’ve registered an outstanding toll balance of $12.51 against your account. To escape a late charge of $50.00, visit [fake link] to pay your balance.”
Visiting the provided link redirects one to forged sites that closely resemble authorized toll service sites. These pages want to extract sensitive information, including personal identifiers and credit card details, and are possibly subject to theft and monetary loss.
FBI’s Recommendations
To avoid this kind of scam, the FBI advises you to:
- Delete Suspicious Messages: Delete all unwanted messages regarding unpaid tolls or other such messages at once.
- Avoid Opening Links: Do not click on links or open strange messages because they might open malicious sites or downloads.
- Authenticity Verification: When a message is suspected to be fake, contact the claimed agency through official procedures like their official website or customer care number.
- Report the Incident: File a complaint with the IC3, giving information such as the originating telephone number and any linked attachments.
Staying Well-Informed and Watchful
Awareness is the best defense against smishing. Being cautious about the indications of such a scam and being cautious about unwanted messages can go a long way in not becoming a victim. Keeping the operating system of your device and security software up to date also increases protection against such attacks.
By being informed and vigilant, you can guard your financial and personal information from the constantly changing tactics of cybercriminals.
Got any experiences to share? Leave a comment.