What Is ‘Smishing’ and Why Is the FBI Recommending You Delete iPhone and Android Text Messages That Say This

Mar. 15, 2025

Stock image of a person holding a cell phone.Photo:Getty

Getty

The FBI is issuing apublic warning about what to doamid widespread reports of “smishing” texts that seek to scam cell phone users into believing they have unpaid road tolls.

The FBI defines “smishing” as “a social engineering attack using fake text messages to trick people into downloading malware, sharing sensitive information, or sending money to cybercriminals." The term is a combination of SMS (short message service) andphishing.

This month marks one year since the FBI Internet Crime Complaint Center (IC3) began seeing an increase in “smishing” complaints about texts claiming to represent road toll collection services from at least three states, the FBI said in its new PSA.

In the last year, the IC3 received more than 2,000 such complaints.

F.B.I. seal.Chip Somodevilla/Getty

The road toll collection scam texts claim the recipient carries an “outstanding toll amount” that must be paid immediately to avoid increased charges, according to the IC3.

The link provided in the text message mimics a state’s toll service name so as to trick people into clicking on it and giving up their personal information — and money.

Palo Alto Networks, a cybersecurity company, explains that the scheme “entices users to reveal personal and/or financial information, including credit or debit card and account information.”

Never miss a story — sign up forPEOPLE’s free daily newsletterto stay up-to-date on the best of what PEOPLE has to offer, from celebrity news to compelling human-interest stories.

TheFederal Trade Commission(FTC) is also warning users who receive a text regarding an unpaid toll that “it’s probably a scam” and these scammers are working “coast to coast.”

“Not only is the scammer trying to steal your money, but if you click the link, they could get your personal info and even steal your identity,” the FTC said.

The text messages follow a similar format of relying on urgency within the message, claiming recipients will accrue even higher costs if they don’t pay right away. Scammers craft a new domain that provides a link to the payment site,Forbesreported.

Examples of domains to keep an eye out for include:

The FBI recommends “smishing” scam recipients to delete all questionable messages they receive. And if recipients happen to click on any links sent or provide their personal information, they should take immediate action to secure personal information, especially financial accounts.

source: people.com