These days, we use our phones for just about everything. Shopping, banking, keeping up with friends—you name it. Unfortunately, this convenience also makes us more vulnerable to scams. According to the FBI, online scams brought in $16 billion in 2024—a 33% jump from 2023.
“For scammers, this is a full-time job,” said Chris Blackmore, TD Senior Manager of Customer Education. “And they’re constantly evolving with new technology.”
The good news? A little knowledge—and a healthy dose of skepticism—can go a long way. Here’s what you need to know to protect yourself from one of today’s most common mobile scams: SMISHING.
What is SMISHING?
If you’ve ever received a suspicious text, you’ve likely encountered SMISHING. “In this type of scam, fraudsters send text messages pretending to be trusted organizations—like a bank, government agency, or delivery service—to trick you into sharing personal information or clicking a dangerous link,” says Lindsey Federer, TD Fraud Management Strategist
“The danger is that we’re on our phones all the time,” adds Mandy Kelso, TD Head of Financial Education. “The more you’re on your phone, the more likely you are to click on something you shouldn’t.”
Protect yourself from SMISHING
Here’s what to do the next time you receive an unexpected text:
Check the sender’s ID.
Make sure the ID or phone number is familiar and tied to a legitimate organization. Compare it to previous messages or contact the organization directly to double-check.
Quick tip: many large organizations use 5- or 6-digit short codes for texting. These are harder—but not impossible—for scammers to fake.
“If something seems fishy, don’t ignore that feeling,” Lindsay said. “Investigate. Be your own advocate.”
Don’t share personal information.
Legitimate organizations will never ask for sensitive information—like your Social Security number, passwords, or account details—over text, phone, or email. If they do, it’s a red flag.
SMISHING messages often invoke a sense of urgency to trick you into sharing these details. Examples include threatening account closure, claiming suspicious activity, or offering a limited-time deal.
“The goal of a smishing text is to trigger emotion. They want you to panic. Validate the request before taking the next step,” said Chris.
Avoid clicking links in unsolicited texts.
These links often lead to fake websites designed to steal your information or secretly download malware onto your phone. Instead, open your browser and type the company’s web address directly.
Turn on spam filtering.
If you believe the text message you receive is a scam, block and report as spam. Most mobile carriers and smartphones offer spam filtering features to block suspicious messages. If you believe the text message you receive is a scam, block and report as spam. Check with your carrier or visit the FTC website for guidance on setting this up.
Lindsey’s top tip? Practice the pause. “Take a moment to think: who is this coming from? How are they reaching out to me? What are they asking for?” she said.
“We're so quick to be accommodating, especially to authority figures,” she added. “When you slow down, you can think instead of react.”
What to do if you’re a victim of SMISHING
If you think you've fallen for a SMISHING scam, act quickly:
Stop communication with the scammer.
Don’t reply, even to say “stop.” If you’ve already replied, don’t engage further.
Report the message.
Report it to the organization, your mobile carrier, and the appropriate authorities. Most messaging apps have a spam reporting feature built in. You can find more reporting tips at this website from the FTC.
Check your bank accounts.
Monitor for unauthorized transactions and report any suspicious activity immediately. TD Bank and other banks allow you to temporarily lock your account.
Change your passwords.
Change passwords for affected accounts, especially if you clicked a link or shared information.
Monitor your credit.
Keep an eye on your credit for signs of identity theft. Many financial institutions now offer free credit monitoring as a helpful tool.
For added protection, consider freezing your credit with the three major credit bureaus: Equifax, Experian, and TransUnion, to help prevent new accounts from being opened in your name. It’s free, and you can unfreeze your credit at any time.
Action checklist for SMISHING victims:
- Stop communication with the scammer
- Report the scam
- Change your passwords
- Monitor financial accounts and credit reports for unusual activity
- File a complaint with the FTC or local authorities if funds were stolen or your identity was compromised
Think before you click.
SMISHING scams are getting more sophisticated, but by staying alert and slowing down, you can protect yourself.
“The tools and information you need to stay safe are out there. By understanding how these scams work, you can put the power back in your hands,” said Chris.
Visit TD.Com/FraudPrevention to learn more about protecting yourself and your loved ones from fraud and scams.
For more on personal finance topics
If you have more questions about personal finance topics, visit the Learning Center on TD Bank's website. You can find more TD Bank services at TD.com. We hope you found this helpful. This article is for informational purposes only and is based on information available as of June 2025 and is subject to change. This content is not intended to be used or acted upon with respect to any client's specific circumstances. For specific advice about your unique circumstances, consider talking with your qualified professionals.