# Smishing

Smishing is phishing by SMS or chat message, typically a fake delivery notice, bank alert or toll fine with a link to a credential or card-theft page.

## How it works

Messages are sent in bulk from rotating numbers or SIM farms and point to short-lived domains, often registered in the same week, that imitate a courier, bank or government service.

Many kits only show the phishing page to mobile visitors from the targeted country and a harmless page to everyone else.

## Example from the PhishDestroy database

- [streaming-community.city](https://phishdestroy.io/domain/streaming-community.city/): Banking-phishing domain, first detected 2026-06-15.
- [landing.com](https://phishdestroy.io/domain/landing.com/): Banking-phishing domain, first detected 2026-06-15.
- [carinascatering.com](https://phishdestroy.io/domain/carinascatering.com/): Banking-phishing domain, first detected 2026-06-15.

## How to protect yourself

- Do not follow links in unexpected delivery or payment messages; open the official app instead.
- Report smishing to your carrier (in many countries by forwarding to 7726).

## Related tools

- [SMS Analyzer](https://phishdestroy.io/developer-tools/sms-analyzer)
- [Link Unwrapper](https://phishdestroy.io/developer-tools/link-unwrapper)
- [QR Code Decoder](https://phishdestroy.io/developer-tools/qr-decoder)

## Related terms

- [Quishing](https://phishdestroy.io/glossary/quishing/)
- [Cloaking](https://phishdestroy.io/glossary/cloaking/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)

## Further reading

- [Newly Registered Domains: Phishing Risk Guide](https://phishdestroy.io/newly-registered-phishing-domains)

## Glossary

- [All terms](https://phishdestroy.io/glossary/)

Canonical: https://phishdestroy.io/glossary/smishing/