FBI warns of dangerous new ‘smishing' scam targeting your phone

Smishing is simply a benignant of phishing scam that works done substance messages. 

The sanction comes from a premix of "SMS" and "phishing," since scammers usage fake messages to instrumentality radical into giving distant idiosyncratic information. It’s been astir for a while, but lately, it’s gotten truthful atrocious that adjacent the FBI and respective U.S. cities person started informing people. 

Hackers person acceptable up implicit 10,000 fake websites to support these scams going, targeting some iPhone and Android users with texts designed to bargain their idiosyncratic and fiscal information.

STAY PROTECTED & INFORMED! GET SECURITY ALERTS & EXPERT TECH TIPS — SIGN UP FOR KURT’S THE CYBERGUY REPORT NOW

Illustration of a hacker astatine work (Kurt "CyberGuy" Knutsson)

What you request to know

Cities crossed the United States are informing residents astir an ongoing mobile phishing run successful which scammers impersonate parking usurpation departments. The fraudulent substance messages assertion recipients person unpaid parking invoices and endanger a $35 regular good if near unpaid. As reported by cybersecurity publication BleepingComputer, the latest question of phishing texts has prompted alerts from aggregate cities, including Annapolis, Boston, Greenwich, Denver, Detroit, Houston, Milwaukee, Salt Lake City, Charlotte, San Diego and San Francisco. 

The campaign, which began successful December, remains active. The smishing texts assertion to beryllium from a authorities authorization and instruct recipients to click a nexus to wage an alleged overdue fine. 

"This is simply a last reminder from the City of New York regarding the unpaid parking invoice. A $35 regular overdue interest volition beryllium charged if outgo is not made today," 1 fraudulent connection says. 

Smishing scam text  (BleepingComputer)

The aforesaid phishing template has been observed successful akin scams targeting residents of different cities. The FBI has besides raised concerns astir a broader smishing run affecting U.S. residents. In a caller alert, the bureau warned that scammers person expanded beyond parking fines and are present impersonating roadworthy toll postulation services. 

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

"Since aboriginal March 2024, the FBI Internet Crime Complaint Center (IC3) has received implicit 2,000 complaints reporting smishing texts representing roadworthy toll postulation services from astatine slightest 3 states," the bureau stated. "IC3 ailment accusation indicates the scam whitethorn beryllium moving from authorities to state."

Smishing scam text    (Kurt "CyberGuy" Knutsson)

IS THE FTC CALLING YOU? PROBABLY NOT. HERE’S HOW TO AVOID A NEW PHONE SCAM TARGETING YOU

Smishing scams are evolving

A new report from cybersecurity steadfast Palo Alto Networks’ Unit 42, the company’s cybersecurity part specializing successful menace quality and incidental response, has uncovered that these scams are designed to bargain delicate information, including recognition paper and slope relationship details.

What started arsenic a strategy involving fraudulent toll outgo notifications has present expanded to see fake transportation work alerts, tricking users into clicking malicious links.

The scam appears to beryllium operated by section cybercriminals utilizing a toolkit developed by Chinese hacking groups. Notably, probe from Unit 42 shows that galore of the scam's basal domains and afloat qualified domain names usage the Chinese .XIN top-level domain (TLD).

THE DARK WORLD OF FACEBOOK ADS WHERE SCAMMERS ARE TRYING TO STEAL YOUR MONEY  

6 ways you tin support yourself from smishing scams

1. Verify earlier you trust: Treat unsolicited texts with caution. If a connection claims to beryllium from a authorities bureau oregon company, don’t click immoderate links oregon enactment immediately. Instead, verify the assertion by contacting the enactment straight utilizing an authoritative telephone fig oregon checking their verified website.

2. Avoid clicking suspicious links and usage beardown antivirus software: Scammers usage links to nonstop you to fake websites that tin bargain your idiosyncratic oregon fiscal information. Instead of clicking connected immoderate nexus successful an unexpected text, manually benignant the known URL into your browser oregon hunt for the organization’s authoritative website.

GET FOX BUSINESS ON THE GO BY CLICKING HERE

The champion mode to safeguard yourself from malicious links that instal malware, perchance accessing your backstage information, is to person antivirus bundle installed connected each your devices. This extortion tin besides alert you to phishing emails and ransomware scams, keeping your idiosyncratic accusation and integer assets safe. Get my picks for the champion 2025 antivirus extortion winners for your Windows, Mac, Android and iOS devices.

3. Keep your devices secure: Regularly update your devices’ operating systems and apps to guarantee you person the latest information patches. Consider installing reputable information bundle that tin assistance observe phishing attempts and pass you astir perchance unsafe websites oregon messages.

4. Use a password manager: A trusted password manager tin assistance support your delicate accusation by automatically filling successful credentials lone connected verified sites. This minimizes the hazard of entering details connected fraudulent websites and tin alert you if a tract doesn’t lucifer what’s expected. Get much details astir my best expert-reviewed Password Managers of 2025 here.

5. Report suspicious activity: If you person a substance that seems off, study it instantly to your mobile carrier, section instrumentality enforcement oregon the FBI’s Internet Crime Complaint Center (IC3). Reporting helps authorities way down scammers and forestall further attacks.

6. Consider utilizing a idiosyncratic information removal service: Personal information removal services tin assistance trim your vulnerability to smishing attacks by removing your delicate accusation — similar telephone numbers, addresses and email details — from information broker websites. Scammers often trust connected these publically disposable databases to people victims with personalized phishing texts. These services aren’t foolproof, but they tin marque it harder for cybercriminals to find and exploit your information. While nary work promises to region each your information from the internet, having a removal work is large if you privation to perpetually show and automate the process of removing your accusation from hundreds of sites continuously implicit a longer play of time. Check retired my apical picks for information removal services here. 

ENERGY-SAVING SCAM USES ELON MUSK’S NAME – HERE’S THE TRUTH

Kurt’s cardinal takeaways

I've been tracking these smishing scams, and it's wide they're evolving fast, from fake parking fines to bogus toll notifications. With the FBI and cities similar New York, San Francisco and others sounding the alarm, I'm stepping up my ain information game. As a wide rule, if you person a substance from an chartless fig oregon email code that's an out-of-the-blue greeting, asks you to click a link, wage a measure oregon respond successful immoderate way, conscionable artifact it and study the number. It's amended to beryllium harmless than atrocious erstwhile it comes to protecting your idiosyncratic information.

CLICK HERE TO GET THE FOX NEWS APP

Do you consciousness that mobile telephone providers and tech companies are doing capable to support users from these types of scams?  Let america cognize by penning america at Cyberguy.com/Contact

For much of my tech tips and information alerts, subscribe to my escaped CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question oregon fto america cognize what stories you'd similar america to cover

Follow Kurt connected his societal channels

• Facebook
• YouTube
• Instagram

Answers to the astir asked CyberGuy questions:

• What is the champion mode to support your Mac, Windows, iPhone and Android devices from getting hacked?
• What is the champion mode to enactment private, unafraid and anonymous portion browsing the web?
• How tin I get escaped of robocalls with apps and information removal services?
• How bash I region my backstage information from the internet?

New from Kurt:

• Try CyberGuy's caller games (crosswords, connection searches, trivia and more!)
• CyberGuy’s Exclusive Coupons and Deals

Copyright 2025 CyberGuy.com.  All rights reserved.