Smishing is yet another type of phishing attack that uses text messaging instead of emails as a weapon for getting sensitive information. This type of attack is as dangerous as email phishing. A smishing text often contains a fake link
that looks realistic and takes victims to a form used to steal their information. The link possibly downloads malware such as viruses, ransomware, and spyware on the user's device.
These smishing text messages often use urgent message requests as an attack, usually sent from a bank or courier delivery service; for example - they may claim that there's been a significant withdrawal from your bank account or that you need to track a missing package. It is easy to fall into such scams if we don’t stay alert and attentive at the right moment.
Vishing?
Fraud calls or fake voice calls fall under the “Vishing.” Hackers/attackers call user victims, usually using prerecorded robocalls, and pretend to be an official company to remove personal information from a user.
For example, as a user, you can get a call about your car's extended warranty. If you answer this fake call and get connected to a fake agent, you may be asked to provide information such as:
- First and last name
- Address
- Driver's license number
- Social Security number
- Credit card information
Whenever card details are asked, it is more likely to be an attack, and one needs to be extremely alert when sharing sensitive information about your card.
Common steps to be taken for preventing Smishing and Vishing
- Never click on links from a stranger who has no identity. Users should visit directly to real websites
- Never give sensitive information, precisely card details, to someone who contacts you as a stranger. If they show themselves as a bank representative – always be alert and check the person's validity.
- We should try to answer calls or texts from numbers you don't recognise or are likely fake. Even if you answer only intending to ask to be taken off the list, the attackers can note that you have interacted with the call. This will likely increase the number of calls you get from scammers.
What if the Information is already Stolen?
- Freeze your Account—You can lock your account for free. Always be ready to learn how to do this. If you know the scammer has your private information, freezing your card is the safest initial step to avoid further loss.
- Personal privacy scan - You can find out if your info is out on the web with some official guidelines given. You can check those links by consulting someone
- Identity theft protection - For complete identity theft protection after a scammer has victimized you, these official platforms provide tools to help you check your identity after a run-in with a scammer. Some of these tools include:
- Dark web surveillance
- Credit card monitoring
- Payday & non-credit loan alerts
- Address alert change
- SSN monitoring
- Financial account activity monitoring