Phishers Turn to SMS with Text Message Phishing   - 613 Views, 1 Comment

Summary: Not content with tricking victims into giving up private identity information via email, phishers are increasingly turning to text messaging to scam account numbers, credit card numbers, social security numbers, and more from their targets.

Previous Article « Palm’s Pres Spying on Palm Pre Users and Reporting Back to Palm
Read Next Article » State of Illinois Defines “Social Networking Site”

  Follow Anne on Twitter     Friend Anne on Facebook

Not content with tricking victims into giving up private identity information via email, phishers are increasingly turning to text messaging to scam account numbers, credit card numbers, social security numbers, and more from their targets.

One advantage that phishing by text message has is that while people are becoming increasingly wary of email messages exhorting them to log into an account, text message phishing is still relatively novel, and so people are more likely to fall for it.

And while text message phishes often contain a link on which the phisher wants you to click, cell phone phishing may be even more compelling when it asks you to call a number.

For example, this phishing text - from a real cell phone phishing effort that was making the rounds last week - has the potential to be very compelling, particularly if the person receiving it actually has an account at the referenced financial institution

Central One FCU Alert: Your CARD has been DEACTIVATED. Please contact us at 508-744-3140 to REACTIVATE your CARD.

A call to the number lead to a voice menu with an option to punch in your credit card number to “reactivate your card”, where ‘reactivate your card’ of course really meant “give a scammer your credit card number.”

Fortunately, the same rule to protect yourself against email phishing applies here - if you get a text message (or email) asking you to visit your account online, or to call your financial institution or other organization with whom you do business, don’t click the link, or call the number in the text message.

Instead, contact the organization directly by typing in their website URL in your browser, or calling the number that you ordinarily use to call them. If, in fact, they are genuinely trying to contact you, you’ve lost nothing but the time it took you to type the address or punch in the ten numbers.

On the other hand, if it is a scam, you’ll have saved yourself untold dollars and hassle.

Phishers Turn to SMS with Text Message Phishing

 Follow Anne on Twitter

 Twitter Explained in Plain English

 Friend Anne on Facebook

Previous Article « Palm’s Pres Spying on Palm Pre Users and Reporting Back to Palm
Read Next Article » State of Illinois Defines “Social Networking Site”

Read more:

»  Tax Refund Email from IRS at GovBenefits.gov is Fake! Don’t Get Caught by IRS Phishing Scam!

»  eBay Phishing Bug Allows Phishing Using Real eBay Web Addresses

»  The Tax Man Phisheth - Reminder that it’s the Season for IRS Tax Phishing

»  Phishers Use Wildcard DNS to Build Convincing Bait URLs - Spamfo

For additional similar stories check out our archives on Phishing, Security

NOTE: We never, ever, ever will recommend any product or service on this site that we have not regularly used ourselves and do not wholeheartedly believe in. That said, in some cases after being very pleased with a product or service, we may enter into a relationship with the provider of that product or service such that if someone purchases that product or service based on our recommendation, we may get a small payment. Such payments go towards the upkeep of the Internet Patrol.

 

1 Comment »

  1. just this week,two very real looking emails arrived to me,both whom I’m a customer with. I didn’t click the link,but forwarded them to the abuse department of the companies.They emailed me back,saying the emails were not from them and not to click onto any links. Thank goodness I had since enough not to. I cant believe the scams crooks use to get honest peoples money. I’m on disability and cant afford to be ripped off.

    Comment by Charles Tilley — 8/21/2009 @ 9:11 am

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
 This article first appeared on 8/18/2009
The Internet Patrol
Patrolling the Internet for You!