Smishing, a portmanteau of ‘SMS‘ and ‘phishing‘, is a cyberattack where fraudsters send deceptive text messages to trick individuals into divulging personal or financial information. In the UK, these scams have become increasingly sophisticated, with cybercriminals impersonating trusted organisations to exploit recipients’ trust.
Recent Smishing Scams in the UK
One prevalent tactic involves fraudsters posing as delivery companies. Victims receive texts claiming a parcel is awaiting delivery, urging them to click a link to reschedule or pay a fee. These links lead to counterfeit websites designed to harvest personal details. Proofpoint research indicates that in the first half of 2023, 26% of smishing attempts in the UK were delivery-themed.
Another alarming trend is ‘quishing‘—scams involving QR codes. Fraudsters place fake QR codes on parking meters or signs, directing users to malicious sites that steal payment information. In August 2024, UK motorists were warned about such scams after reports emerged of fake parking QR codes leading to financial losses and potential fines.
Additionally, conversational smishing attacks have surged. In these scams, attackers pose as family members or friends, engaging in seemingly benign conversations to build trust before requesting money or sensitive information. The first half of 2023 saw a 196% increase in these types of attacks in the UK compared to the same period in 2022.
Protecting Yourself from Smishing
To safeguard against smishing attacks:
* Be cautious with unsolicited messages. If you receive an unexpected text from a delivery service or bank, verify its authenticity through official channels before responding.
* Avoid clicking on links or scanning QR codes from unknown sources. Instead, manually enter the official website address into your browser.
* Look for signs of tampering. Before scanning QR codes, especially on parking meters or public signs, check for stickers or overlays that might indicate fraudulent activity.
* Utilise security features. Enable two-factor authentication on your accounts and consider using scam protection tools to filter potential threats.
Report suspicious messages. Forward smishing texts to 7726 (SPAM) to help authorities combat these scams.
Awareness and vigilance are your primary defences against smishing. By staying informed about the latest scam tactics and adopting cautious communication practices, you can protect yourself from falling victim to these deceptive schemes.
