Smishing
Smishing is phishing by SMS or chat message, typically a fake delivery notice, bank alert or toll fine with a link to a credential or card-theft page.
How it works
Messages are sent in bulk from rotating numbers or SIM farms and point to short-lived domains, often registered in the same week, that imitate a courier, bank or government service.
Many kits only show the phishing page to mobile visitors from the targeted country and a harmless page to everyone else.
Example from the PhishDestroy database
- streaming-community.city: Banking-phishing domain, first detected 2026-06-15.
- landing.com: Banking-phishing domain, first detected 2026-06-15.
- carinascatering.com: Banking-phishing domain, first detected 2026-06-15.
How to protect yourself
- Do not follow links in unexpected delivery or payment messages; open the official app instead.
- Report smishing to your carrier (in many countries by forwarding to 7726).