Got a weird text message? 'Smishing' scams likely rising because of AI, experts warn
If it seems like your phone has been blowing up with more spam text messages recently, you're probably right.
The Canadian Anti-Fraud Centre says so-called "smishing" attempts appear to be on the rise, thanks in part to new technologies that allow for co-ordinated bulk attacks.
Smishing is "more than likely increasing" with help from artificial intelligence tools that can craft convincing messages or scour data from security breaches to uncover new targets, according to the centre's spokesperson, Jeff Horncastle.
Though the centre has actually received fewer fraud reports in the first six months of 2025, Horncastle says that can be misleading because so few people actually alert the centre to incidents.
The warning comes days after the Competition Bureau sent an alert about the tactic because, it says, many people are seeing more suspicious text messages.
Smishing is a sort of portmanteau of SMS and phishing, in which a text message is used to try to get the target to click on a link and provide personal information.
The ruse comes in many forms but often involves a message that purports to come from a real organization or business urging immediate action to address an alleged problem.
It could be about an undeliverable package, a suspended bank account or news of a tax refund.
Horncastle says it differs from more involved scams such as a text invitation to call a supposed job recruiter, who then tries to extract personal or financial information by phone.
Nevertheless, he says a text scam might be quite sophisticated since today's fraudsters can use artificial intelligence to scan data leaks for personal details that bolster the hoax, or use AI writing tools to help write convincing text messages.
"In the past, part of our messaging was always: watch for spelling mistakes. It's not always the case now," he said.
"Now, this message could be coming from another country where English may not be the first language but because the technology is available, there may not be spelling mistakes like there were a couple of years ago."
The Competition Bureau warns against clicking on suspicious links and forwarding texts to 7726 (SPAM), so that the cellular provider can investigate further. It also encourages people to delete smishing messages, block the number and ignore texts even if they ask to reply with "STOP" or "NO."
Horncastle says the centre received 886 reports of smishing in the first six months of 2025, up to June 30. That's trending downward from 2,546 reports in 2024, which was a drop from 3,874 in 2023. That too, was a drop in reports from 7,380 in 2022.
But those numbers don't quite tell the story, he says.
"We get a very small percentage of what's actually out there. And specifically when we're looking at phishing or smishing, the reporting rate is very low. So generally we say that we estimate that only five to 10 per cent of victims report fraud to the Canadian Anti-Fraud Centre."
Horncastle says it's hard to say for sure how new technology is being used, but he notes AI is a frequent tool for all sorts of nefarious schemes such as manipulated photos, video and audio.
"It's more than likely increasing due to different types of technology that's available for fraudsters," Horncastle says of smishing attempts.
"So we would discuss AI a lot where fraudsters now have that tool available to them. It's just reality, right? Where they can craft phishing messages and send them out in bulk through automation through these highly sophisticated platforms that are available."
The Competition Bureau's deceptive marketing practices directorate says an informed public is the best protection against smishing.
"The bureau is constantly assessing the marketplace and through our intelligence capabilities is able to know when scams are on the rise and having an immediate impact on society," said deputy commissioner Josephine Palumbo.
"That's where these alerts come in really, really handy."
She adds that it's difficult to track down fraudsters who sometimes use prepaid SIM cards to shield their identity when targeting victims.
"Since SIM cards lack identification verification, enforcement agencies like the Competition Bureau have a hard time in actually tracking these perpetrators down," Palumbo said.
Fraudsters can also spoof phone numbers, making it seem like a text has originated with a legitimate agency such as the Canada Revenue Agency, Horncastle adds.
"They might choose a number that they want to show up randomly or if they're claiming to be a financial institution, they may make that financial institutions' number show up on the call display," he said.
"We've seen [that] with the CRA and even the Canadian Anti-Fraud Centre, where fraudsters have made our phone numbers show up on victims' call display."
cbc.ca
