Don’t Fall for This Smishing Trap

This scam involves receiving a surprise text that appears to alert you of an unauthorized login attempt to your email or social media account. The message includes a multi-factor authentication (MFA) code and a supposed customer support number to call if you didn’t request it. These codes are typically only sent during login—receiving one out of the blue should raise a red flag.

Though the message looks legitimate, it’s a smishing (SMS phishing) attack. The number connects you directly to a scammer, not a support team. If you call, they’ll try to trick you into revealing your login credentials or personal information—then use it to hijack your account.

Protect yourself:

• Treat unexpected or urgent texts with caution.
• Never trust contact info from a suspicious message. Use official sources only.
• Don’t let urgency override caution. Stop, think, and verify before acting.