Smishing: protecting yourself from text message scams

Last updated: 27 August 2018

Cyber-crime is evolving and growing fast. Between 2013 and 2015, mobile fraud increased by 173%.* One of the ways that fraudsters target your mobile device is through smishing, also known as SMS phishing.

What is smishing?

Smishing is a form of social engineering fraud where criminals send text messages requesting you to follow a link or call a number within the text message as a matter of high importance. By carrying out either of these actions you’re placing your account security at risk.

Smishing texts typically request urgent action, which often means clicking on a malicious link that in turn enables data theft.

What do smishing texts look like?

You receive an unexpected text on your mobile phone claiming to be from HSBC asking you to click a link or call a number urgently. Here are a few ways that fraudsters may try to entice you into taking action:

Stating that your bank suspects there has been fraudulent activity on your account;
Requesting that you log on to a website to change your PIN/password;
Claiming that you’re in trouble with tax authorities;
Informing you that you have won some money.

If you receive an unexpected and suspicious text, don't reply to the text or click any links within it.

It's important to remember:

Don’t click any links in texts you weren’t expecting to receive.
Don’t reply to the text using the contact information provided in the text.
HSBC will never ask you for your full PIN or password
HSBC will never text you a link that takes you directly to our logon page
Fraudsters can use 'text spoofing' to deliberately falsify the telephone number to appear as 'HSBC' to seem like a genuine bank text
Never share your security details with anyone else

Find out more

To learn more, review the Social Engineering factsheet available in the HSBCnet Help Centre or call your HSBC representative.

If you’re suspicious about an incoming text purporting to be from HSBC, please call your HSBC representative for further verification.

* Source: @https://safeguard.hsbc.com/what-is-financial-crime/cybercrime