What smishing is
A scam that arrives as a text message. Smishing is SMS plus phishing, and it works because a message feels more personal than an email.
Last reviewed 28 August 2026
Someone sends you a message pretending to be your bank, a courier, the government or your phone company. It gives you a reason to hurry and something to tap. The goal is always one of three things: a code you read out, a page where you type your password, or an app you install.
The patterns you will actually see
The KYC deadline
Dear Customer, your SBI KYC expires today. Update immediately to avoid account being blocked: http://bit.ly/3xKyc9
The tell: No bank gives you until today. KYC is never updated through a link in a text message.
The digital arrest
This is CBI. An FIR has been registered against your Aadhaar for money laundering. Transfer Rs 25000 to verify your account or face arrest today.
The tell: No police force, court or customs office takes money to clear a case, and none of them will keep you on a call while you pay.
The held parcel
Your package is held due to incomplete address. Pay Rs 25 redelivery fee: http://tinyurl.com/parcel9
The tell: The fee is tiny on purpose, because a small amount feels safe to pay. A courier that cannot deliver leaves a card or calls.
The prize you never entered
Congratulations! You have won Rs 25,00,000 in the lucky draw. To claim, transfer Rs 5000 to verify your identity.
The tell: You cannot win a draw you never entered, and a genuine prize never costs money to release.
The easy job
Part time job. Rate hotels and earn Rs 50 per task. Daily payout. Join our group now.
The tell: The first few payouts are real. That is what buys your trust before you are asked to deposit.
The address that is almost right
Unusual login detected. Secure your account at https://hdfcbnk-secure.com/login
The tell: Read it letter by letter. The real one is hdfcbank.com. One missing letter is the entire scam.
Why it works on careful people
These messages are not aimed at people who are careless. They are aimed at people who are busy, worried, or in the middle of something else. The deadline exists to stop you checking. The fear exists to stop you thinking. Being taken in by one says nothing about how clever you are.
What to do instead
Close the message. Open your bank’s own app, the one already on your phone, and look. If something is genuinely wrong with your account, it will be there. If it is not there, the message was lying.
If you are not sure, paste the message into the checker. It runs on your phone, nothing is sent anywhere, and it shows you which words caused the verdict.