What is smishing? A guide to SMS scam texts

What is smishing?

Smishing — a combination of "SMS" and "phishing" — is a type of scam where criminals send fraudulent text messages designed to trick you into revealing personal information, clicking malicious links, or transferring money.

Unlike email phishing, smishing exploits the trust people place in text messages. Most people open texts within minutes of receiving them, making SMS a highly effective channel for scammers.

How to spot a smishing text

Watch for these common red flags:

• Urgency language — "Act now!", "Your account will be suspended", "Immediate action required"
• Suspicious links — URLs that don't match the organisation they claim to be from, shortened links, or misspelled domains
• Requests for personal information — Legitimate organisations rarely ask for passwords, PINs, or account numbers via text
• Impersonation — Messages claiming to be from your bank, the ATO, Australia Post, or other trusted organisations
• Too good to be true — Prize notifications, unexpected refunds, or lottery winnings you never entered

What to do if you receive a suspicious text

1. Don't click any links in the message
2. Don't reply to the sender
3. Verify independently — contact the organisation directly using a number from their official website (not from the text)
4. Report it — forward the message to the Scamwatch website or call 1300 795 995
5. Block the sender on your phone

How Paxello helps

Paxello analyses forwarded messages using AI to detect scam patterns, suspicious URLs, urgency language, and impersonation attempts. Within seconds, you receive a plain-English risk assessment telling you whether a message is safe or suspicious — no technical knowledge required.