ELENXOS SECURITY CENTER

How do I spot a scam text message?

What is smishing?

Smishing is a form of phishing that uses SMS or similar mobile messages to deceive recipients. The goal may be to steal passwords, collect card details, install malicious software or trigger a payment. The message often pretends to come from a familiar organization.

Fake courier delivery messages

A common scenario is a message such as 'Your parcel cannot be delivered. Confirm your address and pay ?1.95.' The link may lead to a deceptive page requesting payment-card details. If you are expecting a parcel, check its status through the delivery company's official app or website rather than the SMS link.

Deceptive banking SMS messages

A suspicious SMS may claim that an unusual transaction was detected or that access to your bank account will be restricted. It then asks you to open a link and enter login details or an OTP. Do not follow such instructions from an unexpected message. Contact your bank through its official app or an independently verified phone number.

Impersonation of public services

Scammers may use the names of public services to claim there are outstanding payments, fines or identity checks. Formal wording or a familiar logo does not prove authenticity. For government services, independently open the official website or app and check whether a genuine notification exists.

Why the sender name is not enough

An SMS may display a familiar company name instead of a phone number. In some cases, deceptive messages may even appear in the same conversation as previous legitimate messages. The displayed sender and the message's position in a conversation do not prove that its content is authentic.

Be cautious with shortened links

Shortened links conceal their final destination. However, even a normal-looking link can be deceptive. Do not open an unexpected link merely to find out where it leads. Instead, visit the service using an independently known address.

Small payments and OTP requests

A scam may begin with a request for a small amount, such as a supposed delivery fee. The deceptive page may then ask for card details or an OTP. Do not assume a transaction is harmless because the initial amount is small. Never disclose verification codes to third parties.

How to use the Elenxos SMS Checker

If you receive a suspicious SMS, you can assess its text using the Elenxos SMS Checker. Copy the message after removing personal information, account numbers and secret codes. Review the indicators in the assessment and do not treat a CLEAN result as a guarantee that the message is genuine.

What if you clicked the link?

If you opened a suspicious link, do not enter information or install apps suggested by the page. If you disclosed a password, change it through the official service. If you entered card details or banking credentials, contact your bank promptly. If you installed an unfamiliar app, seek technical assistance to check the device.

How to verify an SMS safely

Do not reply to suspicious SMS messages or rely on the links and phone numbers they contain. Open the official app yourself or type the organization's known website address. If necessary, contact customer support using a number you have independently verified. Independent verification matters even when a message looks convincing.

Elenxos evaluates risk indicators. CLEAN does not mean guaranteed safe.

Try an Elenxos checker →