Smishing — SMS scams
Understand why sMS danger factors: (1) Same channel as real bank alerts — creates trust by association.
In this lesson
Smishing — SMS scams is part of Phishing and Social Engineering. This preview shows how fraud-fighter-pro connects to everyday family decisions such as earning, saving, spending choices, goals, approvals, or parent-guided money conversations inside Progress Penguin.
Today’s money mission
Imagine this situation: You receive: 'ALERT: Your UBA account has been debited ₦45,000. If not you, click here to reverse: ubaalerts.net/reverse'.
What you need to know
SMS danger factors: (1) Same channel as real bank alerts — creates trust by association. (2) Higher trust than email — SMS feels more direct and immediate. (3) Small mobile screen hides full URL ('ubaalerts.' not clearly suspicious when truncated). (4) Tap-to-open ease — links are one tap away on mobile. Each factor increases the probability of a successful attack vs email.
Real-life example
Real-life money moment: You receive 5 SMS messages from different 'banks' over one week, all asking you to click links. Design a personal SMS security protocol. — SMS security protocol: the core rule is never click links in financial SMS — always navigate independently. Alphanumeric sender IDs (branded names) are harder to spoof than phone numbers — though not impossible. Independent verification is the ultimate defence: if an alert says you've been debited, the bank app will show the same information without any link. Report enables pattern analysis by banks and NCC.
Progress Penguin connection
In Progress Penguin, the phishing detector includes an SMS library. Sort real versus fake bank SMS messages and identify which details reveal each as genuine or fraudulent. This lesson explains the specific smishing signals; the detector shows you the same patterns across multiple real-world examples.
Activity preview
Try the money challenge
Run the scenario through the detector. The warning sign to look for relates to: sMS danger factors: (1) Same channel as real bank alerts — creates trust by association. Can you spot it before DeeDee does?
Quiz preview
Smishing means:
You receive: 'ALERT: Your UBA account has been debited 45000 in local currency. If not you, click here to reverse: ubaalerts.net/reverse'. What should you do?