Glossary
What is smishing?
Smishing is phishing carried out over SMS text messages. Attackers impersonate banks, delivery firms or colleagues and use urgency plus a malicious link to trick you into handing over credentials or payment details — or into installing malware on your phone.
How smishing works
A smishing text manufactures urgency — a missed delivery, a locked account, a suspicious login — and pushes you to tap a link or call a number. The link leads to a fake login or payment page that harvests whatever you enter.
Because texts feel personal and phone screens hide the full URL, smishing often slips past the caution people apply to email.
Common smishing scams
Typical lures include parcel-delivery fees, bank fraud alerts, tax refunds and fake two-factor codes. Many spoof a short, plausible sender name so the message looks official.
How to prevent smishing
- Never tap links in unexpected texts — open the company's app or site directly.
- Verify alerts by calling the official number on your card or statement.
- Never share one-time codes; legitimate companies won't ask for them.
- Report and block smishing numbers and forward scams to your carrier or security team.
How HookPhish helps
HookPhish simulates smishing alongside email and other channels, so your team learns to spot multi-channel phishing — not just suspicious inboxes.
Frequently asked questions
What's the difference between smishing and phishing?+
Phishing is the umbrella term; smishing is phishing delivered specifically by SMS text message rather than email.
How do I report smishing?+
Don't tap any links. Report the text to your security team, block the number, and forward scam texts to your carrier's spam-reporting service.
Can smishing install malware?+
Yes. A smishing link can lead to a page that tries to install a malicious app or capture your credentials, so never tap links in unexpected texts.
Security training designed for people. Built for enterprise.
Learn how HookPhish can effortlessly transform your security program and reduce your human cyber-risk.
Fill out the form to schedule a 30-minute chat with a product expert. We'll discuss the challenges you want to solve, walk through HookPhish, and answer any questions.
Book a personalized demo
Looking to become a partner? Use this form instead.