Knowledge / identity acsc-glossary

Smishing (SMS scam)

Phishing that arrives as a text. Postage, ATO, missed-parcel energy. The link is the problem.

PHISHING / identity abuse, not a malware class01Lure02Landing03Capture04ReuseControls: phishing-resistant MFA, reporting, mail auth, drills.

Smishing is a scam delivered by SMS: a fraudulent text aiming for money, a login, or a hostile click. Australia sees a steady diet of fake postage, myGov, and bank messages. The number is cheap to spoof.

Do not use the link in the message. Use the app or a URL you already know. Report junk to your carrier. Work phones should not be the MFA device for the same people who click shipping texts.

Fact source: ASD's ACSC glossary.