If you have recently received a text message from an unfamiliar number telling you that you won a free gift card, or that there’s been trouble with your financial accounts, chances are you are on the receiving end of a “smishing” attack.
Smishing is a new type of phishing attack — an Internet scam aimed at stealing a target’s personal information or spreading a computer virus. The attack involves using text, or SMS, messages to lure unsuspecting victims to malicious websites via their smartphone’s browser, or to collect sensitive personal information over the phone itself.
Walmart recently issued a fraud alert warning customers of a smishing scam in which mobile users were sent an SMS message telling them they had won a free $1,000 Walmart gift card. Walmart said that the attacks are “scams and are in no way sponsored by or affiliated with Walmart.”
“Walmart will never initiate a text message where we ask for sensitive personal data like credit card information or social security numbers,” said the company.
WSTP-TV in Tampa, Fla. reported that while Walmart does sponsor gift card giveaways, they require completing the company’s online survey with a transaction number from a Walmart receipt.
Another recent smishing attack has caused banks to warn their customers about a new financial scam.
In Denver, KMGH-TV7 News reported last week on text messages appearing to be from phone users’ banks and asking for help resolving problems with their bank accounts. Users were directed to call a phone number, which would lead them through a series of prompts in an attempt to collect private personal information.
In Kentucky, customers of Republic Bank were issued an alert about a similar scam. In both cases, the banks denied the messages had come from them.
“Police say if you received the text but did not enter your financial information, you most likely were not victimized,” reported the Denver TV station.
Wireless carriers are also stepping up to help protect their customers.
CNN reported Monday that all of the major North American carriers have now deployed a centralized spam reporting service. Users can text the short code 7726, which spells “SPAM,” and receive an automated text message asking them to enter the 10-digit phone number that sent a suspected spam message. Users receive replies telling them whether the message was spam, and how to stop it.