How to Protect Against Smishing Attacks

Smishing is a type of phishing attack that uses SMS or text messages to trick victims into revealing sensitive information, such as passwords, credit card numbers, or personal data.

How Smishing Works

1. Scammers send an urgent-sounding text message to thousands of mobile phone numbers across an area code or geographic area.
2. The text messages are designed to sound like an official message from your credit union. The message includes a link that will open in your mobile phone’s browser.
3. If you open the link, you’ll be prompted to enter your online banking username and password onto a fake login page.
4. Once you provide your login credentials, the scammer records your username and password and will attempt to use it to access your account.

If the scammer is successful, they can send money from your account to another external account, leaving you potentially wiped out!

Identifying Phishing Texts

Here are some of the red flags that might help tip you off that a text is a phishing attempt:

Red Flags

• Spelling or grammar errors, odd spacing, unusual sender names.
• Links that don't match the official website address.

Common Smishing Examples:

• Prize/Money Awards - “Congratulations! You’ve won a $500 gift card to Target. Click here to claim your reward.”
• Delivery Notifications - “Hello [Name], your shipment from UPS will arrive today. Click here to track your package.”
• Verification Texts - “Your Firefighters First account has been locked for suspicious activity. Please log in here and verify your account.”
• Gift Card Scams - “Hey, this is [Name]. I’m in a meeting, but I need you to order 5 Amazon gift cards ASAP. I’ll reimburse you once you send them to this email address.”
• Billing Statements - “John, your Verizon billing statement is ready. Please review your charges and send full payment by [date] to avoid late fees.”

If you’re ever unsure if a text message is coming from your credit union, you can always contact us at our official phone number, 1-800-231-1626. Also, check your accounts frequently through online or mobile banking platforms. Log in to your accounts to check for suspicious activity or new messages.

How Do I Stop Getting Spam Texts?

• Block the sender - Prevent further messages from that number.
• Notify your carrier - They can investigate and block the spam sender.
• Reply stop - if the spam is from a service you subscribed to.

Spam-Blocking Tools:

• iPhone: Go to settings > Messages > Filter Unknown Senders.
• Android: Messages > Three dots > Details > App Settings > Spam Protection.

Report the sender to the FTC and FCC - As part of increased efforts to crack down on scam texting and calling, the FTC and FCC allow people to submit complaints which are then investigated by law enforcement.

Add your number to the Do Not Call list - Another tool utilized by the FTC is the National Do Not Call list. You can register your number for free, and if you keep receiving spam calls after 31 days, you can file an official report.

Additional Questions?

Call us with questions or concerns anytime at 800-231-1626 or visit our security resources to learn more about privacy and security measures you can take to stay safe.