Fake Rewards Messages Use Smishing to Target Mobile Users

A recent phishing campaign uses fraudulent text messages claiming that T-Mobile reward points are about to expire, creating urgency to lure recipients into clicking malicious links. The messages direct victims to convincing phishing pages designed to impersonate legitimate rewards experiences and capture sensitive personal or financial information. By combining trusted brand impersonation with time-sensitive offers, attackers can pressure mobile users into acting before verifying the message. The campaign highlights how smishing continues to evolve through familiar brands and convincing social engineering, reinforcing the importance of verifying unexpected texts and monitoring mobile devices for phishing activity.

Read the full report here.