Smishing
Also known as: SMS phishing, text message scam
Phishing carried out through SMS or messaging apps. The text appears to be from a bank, courier, or government but links to a fake site.
Smishing is short for SMS phishing. The scammer sends a text impersonating a delivery service (“Your package is held — pay the customs fee”), a bank (“Suspicious activity detected — verify your account”), or a government agency (“Your tax refund is ready — claim now”). The text usually contains a link to a fake page that captures your login credentials or card details.
In India, smishing is especially active around bank OTPs and electricity bill payments. In the US and UK, parcel-delivery smishing spikes during the holiday season. The pattern is the same: urgency, a believable sender name, and a link that goes to a domain you have never visited before.
Real banks, tax authorities, and courier services never ask you to log in via an SMS link. Use the official app or type the URL directly.