Indian Government Issues Warning on Rising ‘Smishing’ Scam: Protect Yourself with these Safety Measures

Cybercriminals are expanding their reach in India, employing a new tactic to target unsuspecting citizens through text messages. The Indian Computer Emergency Response Team (CERT-In) has issued a proactive warning against “smishing,” a form of phishing conducted through SMS.

In a recent communication via X (formerly Twitter), CERT-In urged the public to exercise caution, alerting them to the risks of “smishing attacks.” This term, derived from ‘SMS phishing,’ refers to a manipulative scheme wherein individuals are tricked into revealing sensitive personal or financial information or engaging in financial malfeasance.

Understanding Smishing:

Smishing, a fusion of “SMS” and “phishing,” entails sending deceptive text messages that masquerade as legitimate communications from sources such as banks, government agencies, or well-known brands. These messages often create a sense of urgency, compelling recipients to click on malicious links, disclose sensitive information, or execute financial transactions.

Modus Operandi:

Smishing scams employ persuasive tactics, with messages that may:

• Threaten negative consequences: “Your bank account will be blocked if you don’t update your details!”
• Offer enticing deals: “Win free gifts by clicking this link!”
• Masquerade as official communications: “Important KYC update needed for your Aadhaar card!”

Once victims click on the provided link, they may be directed to fraudulent websites designed to steal personal information, install malware, or initiate unauthorized transactions.

Staying Safe:

CERT-In recommends the following precautions to avoid falling victim to smishing scams:

• Exercise caution: Refrain from clicking on suspicious links in text messages or social media posts.
• Verify shortened URLs: Use online tools to check the legitimacy of shortened URLs before clicking.
• Be skeptical: Legitimate institutions rarely request sensitive information via text message.
• Update defenses: Employ updated antivirus and antimalware software.
• Double-check senders: Verify any suspicious messages by contacting your bank or institution directly.
• Use separate accounts: Maintain separate personal and online transaction accounts for enhanced security.
• Enable MFA: Implement multi-factor authentication for emails and bank accounts.
• Stay patched up: Keep operating systems and software updated with the latest security patches.

Reporting Cybercrime:

If you come across a suspicious text message or suspect you’ve been targeted by a smishing scam, report it to CERT-In:

• Call the helpline: 1930
• Visit the official website: cybercrime.gov.in

By staying informed and vigilant, you can shield yourself from smishing scams, safeguarding your personal information and finances. Remember: If a text message appears too good to be true, exercise caution to prevent cybercriminals from compromising your hard-earned money and personal data. Stay aware, stay safe!