Smishing and Vishing: When the Scammer Calls Your Phone
Your smartphone is the most personal device you own. Scammers know that you're more likely to trust a text message or a phone call than a random email. This trust is what makes Smishing and Vishing so dangerous.
Smishing: The SMS Trap
**Smishing** is phishing via SMS (text message). Because we tend to check our texts almost immediately, scammers use this channel to send high-urgency alerts.
Classic Smishing Text:
These links lead to fake login pages or "payment portals" designed to harvest your credit card information.
Vishing: The Voice of Deception
**Vishing** (Voice Phishing) involves a phone call. Sometimes it's a "robocall" with a recorded message, but the most effective vishing involves a live human using high-pressure social engineering.
Scammers often use Caller ID Spoofing to make it look like they are calling from your bank, the IRS, or even a local police department.
The "Bank Fraud" Vishing Script:
"Hello, I'm calling from the Chase Fraud Department. We've detected a $2,500 transaction at a Best Buy in Miami. Was this you? No? Okay, we need to secure your account immediately. I'm sending a verification code to your phone now—please read it back to me so I can verify your identity."
What's happening here?
The scammer is actually trying to log into your account. The "verification code" they want you to read back is the Multi-Factor Authentication (MFA) code they triggered. If you give it to them, they've hacked your account.
How to Protect Yourself
- Never Share Codes
No legitimate company—bank, Google, or Microsoft—will ever call you and ask for a one-time verification code (MFA/2FA code).
- Hang Up and Call Back
If someone calls claiming to be from your bank, hang up. Find the official number on the back of your credit card or the bank's website and call them back directly. This bypasses spoofed caller IDs.
- Don't Click, Search Instead
If you get a text about a package or an account issue, don't click the link. Open your browser and go to the official website yourself to check the status.
Inbox or SMS—Safety First
Phishing Inspector doesn't just work for emails. You can paste any link you receive via SMS or social media into our analyzer to verify its safety before you click.
Analyze a Link