scam
Newsletter
28 September 2022

Protect yourself from text message fraud, or smishing

3 minute read

Text message fraud is when criminals send a text to trick their victims into opening an attachment or clicking on a link that will allow the criminals to access personal data. It is sometimes referred to as “smishing” which is a blend of the words SMS (short message services, or texting) and "phishing." Phishing" is pronounced the same way as ‘fishing’ and this is exactly what cybercriminals are doing – fishing for victims. They will send out multiple messages, hoping to catch some victims on their hook. Don’t be one of them.

How to spot a smishing scam

  • You receive an unexpected text message that requests personal information or requires you to click a link. It will most often claim to be from a company you may recognise and trust, most commonly your bank, but not always. Common scams include common subscription services, such as Netflix, and payment apps such as PayPal.
  • You are encouraged to act with urgency, for example the message may try and convince you of “fraudulent activity” on your account. Fraudsters want you to panic, as it increases the chances of you giving them information before you have had time to consider who may be asking for it.
  • It is easier to spot if the text claims to be from a company you do not do business with, but you must always be wary of text messages requesting information. Reputable companies will never ask for personal information over a text message.

How to prevent a smishing scam

  • Never click on links that have been sent to you by an unknown number. This can download ‘malware’ (or ‘malicious software’) onto your mobile device or send the scammer your personal information.
  • Never reply or call the number that sent the message, or any number provided within. Answering unknown text messages can lead to more spam being sent to your mobile device, because it confirms to the scammers that your number is active. Remember they have cast their net wide and will have no idea if your number works or not, unless you respond.
  • Block the number that sent you the suspicious text.
  • If the text message claims to be from a company, you trust and you want to double check, call them using the official phone number on the website. They can confirm if there is an issue and whether they’re trying to contact you. It will also let them know that fraudulent text messages are being sent in their name.

How to report a smishing scam

  • Report it to your mobile provider immediately.
  • If the text was sent to a work phone, inform your IT department.
  • Inform us immediately if you’ve accidentally given your personal details to a scammer at webfraud@alrayanbank.co.uk
  • Report the scam to Action Fraud, the reporting centre for fraud and cyber-crime in England, Wales and Northern Ireland:
    • Call 0300 123 2040 Monday to Friday 8am - 8pm
    • Use the Action Fraud online reporting tool
  • Contact the Police on 101
View all news and events