What smishing looks like
By CDMX Magazine Editorial
Smishing is a text-message scam designed to make you act before you think. Whether you live in Mexico City or are visiting, a fraudulent message may claim that your bank account is blocked, a parcel cannot be delivered, or a small fee is overdue. Its real aim is to capture passwords, card details, one-time codes, money, or persuade you to install something harmful.
The persuasive detail can look ordinary: a familiar logo, a partial account number, or a link whose address almost resembles the real one. But urgency is a warning: “respond now,” “avoid suspension,” or “last notice” is the signal to pause. IBM’s overview of smishing explains how fraudulent SMS messages impersonate trusted organizations; BBVA’s security guide also distinguishes this tactic from phishing and phone-based vishing.
How to check a suspicious text safely
Do not tap the link or reply, even to demand removal. Instead, open the institution’s official app yourself, type its known web address into a browser, or call a number you already trust. A genuine issue can be confirmed there without using the message’s route.
- Check the full sender and web address; a familiar name alone proves nothing.
- Treat requests for passwords, card data, or verification codes as stop signs.
- Never share a one-time code after an unsolicited text, call, or chat.
If you already responded
Act promptly, but do not keep negotiating with the sender. Contact your bank, mobile provider, or affected service through its genuine channels. Change any exposed password, especially if reused elsewhere, and review your accounts for unfamiliar activity. Save screenshots, the number, and the link: they can help document what happened when you report it to the institution or relevant authorities.
That pause is the point: let the text wait while you verify independently. A calm check protects your information far better than a fast response.
Can a legitimate company text you?
Yes, but a text’s arrival does not make its link safe. A company may send notices, yet you should still use an independently opened app or saved contact detail for account changes, payments, or security checks. When in doubt, ignore the message, avoid sharing information, and begin verification from scratch instead.
