SMS, telegram, whatsapp (smishing) Scam Encyclopedia
Every pattern below is under active review by WebVetted analysts. Use this master playbook to compare screenshots, chat transcripts, or listings before you pay anyone claiming to operate on SMS, telegram, whatsapp (smishing).
SMS, Telegram, Whatsapp (smishing) scam guide
Smishing is phishing carried out over SMS text message instead of email. It works the same way email phishing does, a message designed to look like it's from your bank, a delivery company, a government agency, or someone you know, built to get you to click a link, scan a QR code, or reply with sensitive information under time pressure. Every pattern described on this page, from bank OTP harvesting to WhatsApp lottery scams, is a variation on smishing.
A fast-growing smishing pattern impersonates state DMVs, toll agencies, and traffic courts, claiming you owe a fine, have an unpaid toll, or face license suspension unless you pay or "verify" through a link. The FCC and multiple state DMVs, including California's DMV, have issued public alerts about this exact pattern.
Government agencies, including the FCC and several state DMVs, have published direct warnings about this specific pattern, which is one reason it's worth calling out on its own rather than folding it into a generic "text scam" entry.
smishing Scam
Attackers spoof banks and push urgent texts asking for one-time passcodes to “cancel transfers.” WebVetted inspects sender IDs, embedded links, and screenshot metadata to prove the SMS is fraudulent.
We captured Chase-branded SMS that hijacked an AWS bucket to host fake login pages. Another run spoofed Barclays and forwarded OTPs to a Telegram bot in real time.
smishing Scam
Some SMS lure recipients into scanning a QR code that loads a malicious site or APK disguised as delivery tracking. WebVetted extracts the QR destination, SSL fingerprints, and malware reports.
A UPS-themed SMS circulated with a QR that downloaded spyware onto Android devices. Another attack printed FedEx logos over QR stickers and instructed victims to scan for “route confirmations.”
smishing Scam
Scammers spoof schools and claim your child’s tuition is overdue, linking to payment portals that steal cards. WebVetted reviews sender IDs, payment processors, and domain metadata to flag the hoax.
Districts in Texas reported parents receiving SMS with bogus tuition portals that funneled to personal Stripe accounts. Another scheme asked for cafeteria fees via Cash App and spoofed the principal’s name.
smishing Scam
Scammers spoof relatives on WhatsApp, claim their phone is broken, and beg for urgent transfers. WebVetted reviews language patterns, contact photos, and linked payment accounts to expose the impersonation.
One victim wired funds after a “son” claimed he needed bail money, only to discover the real son was asleep. Another case saw scammers steal profile pictures from public Instagram accounts to make WhatsApp avatars.
smishing Scam
Business text compromise actors spoof executives and instruct staff to pay vendors or buy gift cards. WebVetted reviews timing, writing style, and payment instructions to confirm the spoof.
Manufacturing staff received texts from a fake CEO demanding eBay gift cards for “client gifts.” Another scam asked a finance analyst to wire funds to a new vendor with no purchase order.
smishing Scam
SMS funnels claim you qualify for loans and direct you to landing pages that harvest SSNs or charge fees. WebVetted compares sender IDs, domain ownership, and payment requests to expose the funnel.
We tracked a payday SMS funnel that sent victims to a Russian domain collecting identity kits. Another message lured gig workers into paying “processing fees” via prepaid cards.
smishing Scam
Attackers trigger wallet reset flows and then text you posing as support to capture the code. WebVetted reviews the SMS headers, timing, and embedded instructions to flag the lure.
Cash App users reported texts that forwarded PIN codes to a Telegram channel monitored by scammers. Another wave imitated Venmo and claimed an account lock unless you shared the code within five minutes.
smishing Scam
Fraudsters claim you owe customs or handling fees, linking to fake courier portals. WebVetted decodes the link structure, hosting details, and typography to show the text is bait.
We logged DHL-themed SMS that redirected to a Shopify checkout capturing card data. Another series spoofed USPS and installed spyware via sideloaded APKs.
smishing Scam
Link farm channels promise token drops if you click through dozens of shortened URLs, often landing on wallet drainers. WebVetted maps every URL, hosting region, and contract call to uncover the trap.
We reviewed a chain of channels pushing Solana airdrops that all led to the same drainer script. Another operation forced users to complete “missions” that installed spyware APKs.
smishing Scam
Phishers send Telegram chats posing as exchanges or bots that demand fresh KYC documents. WebVetted captures handle metadata, bot history, and attachment hashes to prove the request is fake.
We logged Binance-branded bots pushing users to upload passports to a Google Drive folder. Another crew spoofed OKX admins and asked for “VIP verification” plus a 0.1 BTC fee.
smishing Scam
Threat actors trigger 2FA prompts, then text pretending to be support asking for codes or urging you to disable MFA. WebVetted evaluates the message headers, timing, and instructions to prove it is social engineering.
Crypto traders reported SMS telling them to disable 2FA so a “fraud team” could investigate. Another case targeted Microsoft admins with links to a cloned login page.
smishing Scam
Fraudsters pretend to be power companies, threatening shutoffs unless you pay immediately. WebVetted inspects callback numbers, account details, and payment instructions to show the message is fake.
One scam blasted SMS to Ohio residents telling them to call a “billing hotline” that forwarded to criminals. Another told restaurants their gas would be shut off and demanded Cash App payments.
smishing Scam
Scammers create WhatsApp groups pretending to be official brand support, then sell fake promos or phishing links. WebVetted inspects group invite metadata, admin numbers, and outbound URLs to prove the spoof.
A telco found dozens of “VIP support” groups that charged onboarding fees before vanishing. Another brand saw counterfeit voucher groups that redirected shoppers to Bitly links collecting cards.
smishing Scam
Lottery scammers claim you won a prize but must pay taxes or provide ID to collect. WebVetted inspects sender numbers, document attachments, and banking instructions to expose the grift.
We saw scammers spoof national lotteries and send doctored certificates via WhatsApp attachments. Another version pretended to be a social media raffle but asked winners to buy iTunes cards first.
smishing Scam
Scammers pretend to be support agents and send APKs that grant remote control of your phone. WebVetted analyzes the APK hash, certificate, and requested permissions to prove it is malware.
We examined APKs sent by “bank support” that immediately harvested SMS codes and forwarded them to a command server. Another variant pretended to be a courier support tool but loaded a banking trojan.
Verification steps
Every pattern on this page, whether it claims to be your bank, a courier, a family member, or a government agency, relies on the same trick: urgency plus a link or reply request that bypasses the real channel you'd normally use.
No single check proves a text is fake. A clean result means nothing suspicious surfaced in that pass, not a guarantee the message is legitimate — verifying directly with the organization alongside the message check is what actually protects you.
Before you take action
Smishing is phishing carried out through SMS text messages. Scammers impersonate a bank, delivery company, government agency, or personal contact to get you to click a malicious link, scan a QR code, or reply with sensitive information.
Phishing is the general term for scams that trick you into revealing information or clicking malicious links, typically over email. Smishing is phishing delivered specifically through SMS text messages; a closely related term, "vishing," refers to the same tactics carried out over a phone call.
Don't click links in unsolicited texts, verify requests through the organization's official app or website instead, and enable your phone's spam-filtering features. If a message claims urgency or threatens a deadline, treat that as a reason to slow down, not speed up.
Most state DMVs do not initiate contact about fines, tickets, or license status by text message. If you receive a text claiming to be from your DMV, verify directly on your state DMV's official .gov website rather than clicking any link in the message.
Yes. Multiple state DMVs and the FCC have issued public warnings about text messages impersonating DMV or toll agencies, claiming unpaid fines or license suspension. Treat any such text as suspicious and verify directly with your state DMV.
Generate a full entity dossier plus user-submitted reviews and then share the PDF with law enforcement or platform trust teams.