What is smishing?
SMS phishing, or smishing, is phishing by text message. The text carries a malicious link, or asks the target to reply or call a number, and usually poses as a delivery service, a bank, an executive or the company’s own IT team.
How it works
Phones show little of the sender or the link, and people read texts quickly, so smishing lures are harder to inspect than email. Conversational smishing replies to the target and builds trust over several messages.
Smishing often targets MFA: a text that asks for a one-time code, or warns of a “locked account” with a link to a fake sign-in page.
Why it matters
Text messages bypass the email security stack entirely. People need practice recognizing them on the device where they arrive.
How Living Security helps
Living Security SMS Phishing sends two-way texts with reply and callback lures, and every result feeds the Human Risk Index.
