Who Falls for SMiSh? Learning Through Survey Data Where to Best Target Awareness Training for Mobile Messaging Attacks

• URL: http://arxiv.org/abs/2608.24669v1
• Date: Tue, 25 Aug 2026 15:07:17 GMT
• Title: Who Falls for SMiSh? Learning Through Survey Data Where to Best Target Awareness Training for Mobile Messaging Attacks
• Abstract summary: One such scam, known as SMiShing (or smishing) after Short Message Service (SMS), involves fraudsters sending phishing links via mobile texts.<n>Despite the prevalence of SMiShing, there is a lack of data on who is most vulnerable to these attacks.<n>Our findings indicate that younger individuals and college students are particularly vulnerable.
• Score: 2.3714616729769724
• License: http://creativecommons.org/licenses/by-nc-sa/4.0/
• Abstract: As mobile phone adoption has surged, so have scams involving these devices. One such scam, known as SMiShing (or smishing) after Short Message Service (SMS), involves fraudsters sending phishing links via mobile texts. Despite the prevalence of SMiShing, there is a lack of data on who is most vulnerable to these attacks. Prior research on phishing (its email counterpart) suggests that susceptibility may vary by demographic and contextual factors. In two large-scale surveys, we use a previously published simulation method to collect data from representative samples of U.S. adult mobile phone users. Our findings indicate that younger individuals and college students are particularly vulnerable. Participants struggled to correctly identify legitimate messages, with the second study providing comparisons of financial message variants. Researchers, regulators, and telecoms can help users by creating mobile-specific interventions for under-24 and university customers and adding verifications and warnings.

Related papers

• Read This Paper to Get $50 Million:* An Analysis of Mobile Messaging Scams Using Reddit Data [14.045441992987401]
  This study examines trends in mobile messaging scams and testing the effectiveness of commercial and open-source detection tools.<n>We collect and measure a dataset of 175,430 user-reported mobile messaging scams from Reddit between June 2020 and December 2025.<n>While reply-based scams constitute only 50% of our dataset, their compound annual growth rate (99.98%) is nearly twice that of click-based scams.
  arXiv  Detail & Related papers  (2026-05-15T21:50:21Z)
• FraudShield: Knowledge Graph Empowered Defense for LLMs against Fraud Attacks [42.60338754083519]
  Large language models (LLMs) have been widely integrated into critical automated processes.<n>They are susceptible to manipulation by fraudulent information, which can lead to harmful outcomes.<n>We introduce FraudShield, a framework designed to protect LLMs from fraudulent content by leveraging a comprehensive analysis of fraud tactics.
  arXiv  Detail & Related papers  (2026-01-30T02:48:52Z)
• Detection and Prevention of Smishing Attacks [0.0]
  This work presents a smishing detection model using a content-based analysis approach.<n>To address the challenge posed by slang, abbreviations, and short forms in text communication, the model normalizes these into standard forms.<n> Experimental results demonstrate the model effectiveness, achieving classification accuracies of 97.14% for smishing and 96.12% for ham messages.
  arXiv  Detail & Related papers  (2024-12-31T04:07:12Z)
• (Blind) Users Really Do Heed Aural Telephone Scam Warnings [42.93674984678535]
  We explore how two groups of individuals, legally blind (n=36) and sighted ones (n=36) react to aural telephone scam warnings in naturalistic settings.<n>We developed an aural variant of telephone scam warnings and tested them in three conditions: baseline (no warning), short warning, and contextual warning that preceded the scam's content.<n>Both the legally blind and the sighted participants found the contextual warnings as powerful usable security cues.
  arXiv  Detail & Related papers  (2024-12-05T09:47:38Z)
• Combating Phone Scams with LLM-based Detection: Where Do We Stand? [1.8979188847659796]
  This research explores the potential of large language models (LLMs) to provide detection of fraudulent phone calls. LLMs-based detectors can identify potential scams as they occur, offering immediate protection to users.
  arXiv  Detail & Related papers  (2024-09-18T02:14:30Z)
• Jäger: Automated Telephone Call Traceback [45.67265362470739]
  We introduce J"ager, a distributed secure call traceback system. J"ager can trace a call in a few seconds, even with partial deployment.
  arXiv  Detail & Related papers  (2024-09-04T16:09:28Z)
• Automatic Pseudo-Harmful Prompt Generation for Evaluating False Refusals in Large Language Models [41.00711032805581]
  Safety-aligned large language models (LLMs) sometimes falsely refuse pseudo-harmful prompts, like "how to kill a mosquito"<n> Frequent false refusals not only frustrate users but also provoke a public backlash against values alignment seeks to protect.<n>We propose the first method to auto-generate diverse, content-controlled, and model-dependent pseudo-harmful prompts.
  arXiv  Detail & Related papers  (2024-09-01T03:25:59Z)
• A Quantitative Study of SMS Phishing Detection [0.0]
  We conducted an online survey on smishing detection with 187 participants. We presented them with 16 SMS screenshots and evaluated how different factors affect their decision making process in smishing detection. We found that participants had more difficulty identifying real messages from fake ones, with an accuracy of 67.1% with fake messages and 43.6% with real messages.
  arXiv  Detail & Related papers  (2023-11-12T17:56:42Z)
• Viability of Mobile Forms for Population Health Surveys in Low Resource Areas [47.28991543521559]
  Population health surveys are an important tool to effectively allocate limited resources in low resource communities. Data thus collected is difficult to tabulate and analyze. We conducted a series of interviews and experiments in the Philippines to assess if mobile forms can be a viable and more efficient survey method.
  arXiv  Detail & Related papers  (2023-10-11T20:51:28Z)
• Preliminary Results from a U.S. Demographic Analysis of SMiSh Susceptibility [1.8416014644193066]
  The text method is called SMiShing, (aka SMShing, or smishing) A fraudster sends a phishing link via Short Message Service (SMS) text to a phone. No data exists on who is most vulnerable to SMiShing.
  arXiv  Detail & Related papers  (2023-09-12T15:32:36Z)
• Membership Inference Attacks against Synthetic Data through Overfitting Detection [84.02632160692995]
  We argue for a realistic MIA setting that assumes the attacker has some knowledge of the underlying data distribution. We propose DOMIAS, a density-based MIA model that aims to infer membership by targeting local overfitting of the generative model.
  arXiv  Detail & Related papers  (2023-02-24T11:27:39Z)
• Deep convolutional forest: a dynamic deep ensemble approach for spam detection in text [219.15486286590016]
  This paper introduces a dynamic deep ensemble model for spam detection that adjusts its complexity and extracts features automatically. As a result, the model achieved high precision, recall, f1-score and accuracy of 98.38%.
  arXiv  Detail & Related papers  (2021-10-10T17:19:37Z)
• Decentralized Privacy-Preserving Proximity Tracing [50.27258414960402]
  DP3T provides a technological foundation to help slow the spread of SARS-CoV-2. System aims to minimise privacy and security risks for individuals and communities.
  arXiv  Detail & Related papers  (2020-05-25T12:32:02Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.