Smartphone Users Enter Peak Scam Season as SMS Fraud Surges, Warns Avast

Written by Nour Abdelkader
As the holiday season ends and the new year approaches, smartphone users are entering what cybersecurity experts describe as peak scam season. During this period, hackers and fraudsters intensify their efforts to steal money and personal data, taking advantage of the flood of messages, promotions, and notifications sent to users.

In this context, cybersecurity company Avast has released a set of warnings highlighting the growing danger of SMS-based scams, which have become increasingly common and sophisticated.

These scam messages work similarly to phishing attacks, aiming to trick victims into clicking malicious links or downloading harmful files. Their threat is amplified by the fact that mobile operating systems are often less protected than traditional computers.

The 10 Most Common SMS Scam Types Today:

• Fake delivery or undelivered package notifications

• One-time password (OTP) theft attempts

• Tax refund claims or fine payment requests

• Fake refund messages

• Impersonation of family members or friends

• Fake prizes, offers, or surveys

• Side hustle or fake job offers

• Suspicious investment or cryptocurrency opportunities

• Fake technical support calls or callback requests

• Fraudulent alerts claiming issues with bank, email, or crypto accounts

How to Protect Yourself

According to Avast, most scam messages share clear warning signs, especially creating a sense of urgency with phrases such as “Final notice,” “Act now,” or threats of account suspension.

The company also cautions against shortened links like bit.ly or tinyurl, which are commonly used to hide the true destination of malicious websites.

Any request to enter passwords, PIN codes, verification codes, or make immediate payments is a major red flag, as legitimate organizations do not request such information via text messages.

Unusual spelling mistakes, misspelled brand names, or attempts to move the conversation to another platform are also common scam tactics.

The most important advice: do not respond, do not click, and do not engage with the message at all.