Skip to content
English
More support Sign in
Contact us
  • There are no suggestions because the search field is empty.

Considerations for a successful smishing campaign

This article discusses key considerations for launching successful SMS phishing simulation campaigns.

Overview

Mobile carriers are understandably vigilant when it comes to protecting their customers from malicious texts and as a result of that, some of your smishing simulation campaigns may need extra attention to ensure delivery. Unlike email phishing simulations, where organizations can often whitelist their domains, SMS campaigns offer no such exceptions, and so we have created strategies to work with carrier sensitivity and maximize the deliverability of your smishing simulation campaigns.

Please see this helpful infographic for winning strategies: Successfully Delivering a Smish.

Additional Considerations

Rate Limiting:

Carriers may impose limits on the number of SMS messages that can be sent from a single number within a specific timeframe to prevent misuse and network overload. This is crucial for avoiding service blocks when sending bulk messages.

Content Filtering:

Bulk messages are scrutinized for repetitive content. If identical messages are sent to multiple recipients within a short span, they may be flagged as spam and blocked by AT&T’s filtering systems. The carrier actively scans for specific keywords and patterns indicative of spam, phishing, or other malicious activities.

Keywords to Avoid:

To minimize the risk of your messages being flagged as spam, it's essential to avoid certain trigger words and phrases that are commonly associated with spam. Here are some examples:


Financial Gain: "Save big money," "Make money"


Freebie: "Free trial," "Free gift"


Exaggerated Claims: "Guaranteed," "Risk-free"


Urgency: "Limited time," "Act now," "Asap"

 

These keywords can significantly increase the chances of your messages being classified as spam by a carrier's filters.

Bulk Messaging Restrictions:

Many carrier's systems are tailored to identify and mitigate bulk messaging patterns. Messages sent from a single number to numerous recipients may be restricted to combat spam effectively.

Anti-Spam Measures:

Various anti-spam strategies are employed by carriers, including monitoring of message patterns and content. Distributing the same message to multiple recipients is typically targeted by these preventive measures.

Guidelines for Promotional Content:

All messages must adhere to relevant regulations such as the Telephone Consumer Protection Act (TCPA), which governs the use of SMS for promotional purposes in the United States.

Strategic Recommendations:

To circumvent these restrictions and enhance message delivery rates, it is advisable to spread out message dispatches over a longer period rather than sending large batches quickly. For example, distributing 50 messages over 20 minutes rather than in 20 seconds can significantly increase the success rate.

Furthermore, it is essential to meticulously review the message content for any phrases or keywords that could trigger your carrier's spam filters. Ensuring that messages are compliant and appropriately formatted can prevent them from being blocked.

Finally, in the course of a smishing campaign, users are likely to report them as spam. Using a new domain for each new campaign will minimize the occurrence of delivery failures. Shake it up!

If you have further questions or require additional guidance, please contact us at help@livingsecurity.com