Smishing is still a fast-moving form of mobile phishing, and the lures are getting more targeted. In 2023, smishing accounted for 12.5% of all mobile phishing incidents reported globally, a 47% increase from the prior year. The most common messages mirror everyday triggers like package delivery updates and bank impersonation to push recipients toward quick, credential-harvesting actions.
Key Takeaways
- Smishing attacks most commonly use COVID-19 package delivery lures, accounting for 29% of analyzed SMS phishing in 2023
- 82% of organizations use AI-based SMS filtering reducing smishing success by 65% per Gartner 2024 poll
- Global smishing losses reached $1.2 billion in 2023 per Chainalysis crypto scam report tied to SMS vectors
- In 2023, smishing attacks represented 12.5% of all mobile phishing incidents reported globally, marking a 47% increase from 2022
- Latin America reported 18,000+ smishing cases to OAS in 2023, category: Prevalence and Trends
- In the US, 68% of adults aged 18-24 reported receiving at least one smishing attempt in 2023 per FTC survey data
Smishing attacks are widespread and likely, so recognizing suspicious texts can help protect you quickly.
Related reading
01 · Category
Attack Vectors and Techniques20 stats
01
Smishing attacks most commonly use COVID-19 package delivery lures, accounting for 29% of analyzed SMS phishing in 2023
02
42% of smishing messages impersonate banks using shortened URLs leading to credential harvesters per Proofpoint 2024
03
Zero-click smishing exploits via iMessage affected 11% of iOS devices in Lookout's 2023 detections
04
QR code smishing (quishing) rose 150% in 2023, comprising 18.5% of physical-to-digital attack chains
05
Nigerian prince-style smishing evolved to 22% usage of voice cloning in vishing-smishing hybrids per Recorded Future 2023
06
Malware-laden smishing links delivered trojans in 34% of Android attacks analyzed by Kaspersky in Q3 2023
07
Spoofed carrier SMS for account verification scams made up 27.3% of US mobile phishing per FTC 2023 data
08
Smishing campaigns using Google Voice setup for burner numbers increased 89% in dark web monitoring by Flashpoint 2023
09
Emoji-laden smishing messages evaded filters in 16.7% of enterprise tests per Abnormal Security 2023 report
10
Location-based smishing targeting events like concerts rose 62% during 2023 summer per Wandera (Jamf) analysis
11
Smishing via WhatsApp links comprised 37% of attacks in 2023 per Check Point Mobile Threat Report
12
URL obfuscation with double-encoding used in 51% of smishing per PhishLabs 2023 analysis
13
Voice-to-text smishing mimicking urgent calls rose 93% in 2023 per First Orion study
14
Fake lottery win smishing targeted 14% of campaigns per Smishing.io 2023 dataset
15
SIM swap facilitation via smishing hit 23% of telecom breaches per GSMA 2023 security report
16
Personalized smishing using breached data increased success by 4x per Deep Instinct 2023
17
NFC tap-to-pay smishing scams emerged in 9% of contactless frauds 2023 per Visa trends
18
Crypto wallet drainers via smishing affected 12,500 victims losing $78M in 2023 per Elliptic
19
Multi-stage smishing with initial recon SMS then payload up 67% per SenseOn 2023
20
Holiday-themed smishing peaked at 45% during Black Friday 2023 per Blackpoint Cyber
Interpretation
Attack Vectors and Techniques Interpretation
While your phone dings with urgency about a package, your bank, or a concert ticket, remember that 2023's smishing statistics reveal a criminal industry now operating with the precision of a marketing firm and the ruthlessness of a pickpocket.
02 · Category
Detection, Prevention, and Response20 stats
01
82% of organizations use AI-based SMS filtering reducing smishing success by 65% per Gartner 2024 poll
02
Multi-factor authentication blocked 99.9% of smishing account takeovers in Microsoft's 2023 Digital Defense Report
03
Employee training reduced smishing click rates by 40% in Proofpoint's 2023 simulation benchmarks across 1,000 firms
04
SMS firewalls detected 92% of malicious smishing traffic in Twilio's 2023 Signal platform analysis
05
Zero-trust mobile access prevented 78% of smishing lateral movement in Zscaler's 2023 user study
06
Public awareness campaigns like FTC's Stop Bad Calls lowered smishing reports by 15% in targeted areas 2023
07
EMM solutions like Microsoft Intune blocked 85% of smishing payloads in enterprise deployments per Forrester 2023
08
Behavioral analytics flagged 71% of anomalous SMS interactions pre-click per Darktrace 2023 case studies
09
Carrier-level smishing blocking by T-Mobile prevented 4.5 billion malicious texts in 2023
10
Incident response time for smishing averaged 2.1 days with mature SOCs vs 7.3 days otherwise per SANS 2023 survey
11
Phishing simulations with smishing elements achieved 4.8% click rates pre-training per Cofense 2024
12
RCS messaging smishing blocked by 88% efficacy in Google's Android 14 rollout 2023
13
User reporting tools reduced repeat smishing victimization by 52% per FTC 2023 analysis
14
SIEM integration for SMS logs detected 79% of smishing in Splunk 2023 benchmarks
15
Gamified training cut smishing risks by 55% in 2023 Terranova Security study of 200 orgs
16
Blockchain SMS verification pilots prevented 95% of spoofed smishing per Neuschnee 2023
17
Mobile threat defense (MTD) adoption rose to 62% blocking 83% smishing per IDC 2023
18
Cross-platform smishing intel sharing via MISP cut MTTR by 40% per FS-ISAC 2023
19
Biometric confirmation for SMS actions reduced unauthorized access by 97% per Okta 2023
20
National smishing hotlines handled 1.2M calls in 2023 with 68% prevention success per GSMA
Interpretation
Detection, Prevention, and Response Interpretation
While AI filters, firewalls, and zero-trust models are forming a formidable digital moat, the real castle is being secured by trained users who are wisely skeptical, quick to report, and protected by layers of smart authentication.
03 · Category
Financial and Operational Impacts20 stats
01
Global smishing losses reached $1.2 billion in 2023 per Chainalysis crypto scam report tied to SMS vectors
02
Average smishing loss per victim was $1,450in US IC3 2022 complaints, totaling $52 million from smishing alone
03
Enterprise downtime from smishing breaches averaged 14 hours costing $45,000per incident per IBM Cost of Data Breach 2023
04
UK smishing fraud losses hit £250 million in 2023 per UK Finance annual fraud report
05
23% of smishing incidents led to ransomware deployment with average ransom $1.5M per Sophos 2023 State of Ransomware
06
Retail sector smishing caused $320 million in chargeback fraud in 2023 per LexisNexis Risk Solutions
07
Operational recovery from smishing credential theft cost firms $4.2 million average per Ponemon 2023 study
08
Insurance claims from smishing cyber incidents rose 78% to $800 million in 2023 per Munich Re report
09
Small businesses lost $2.7 million collectively to smishing in SBA 2023 fraud impact assessment
10
Productivity loss from smishing awareness training post-incident averaged 8 hours per employee per Gartner 2023
11
BEC smishing losses averaged $140,000per incident in FBI 2023 alerts
12
Global smishing-related data breaches exposed 45M records in 2023 per ITRC
13
Healthcare smishing caused 12% of HIPAA violations costing $6.5M average per OCR 2023
14
Supply chain smishing disrupted 8 firms losing $200M per CISA 2023 advisories
15
Legal fees from smishing class actions averaged $1.8M per case in 2023 per BakerHostetler
16
Brand reputation damage from smishing scored -24 NPS points per Qualtrics 2023 cyber study
17
Employee turnover post-smishing breach up 11% per Deloitte 2023 human capital report
18
Regulatory fines for smishing non-compliance totaled €45M in EU 2023 per CNIL stats
19
Stock price dips averaged 3.2% after smishing disclosures in 2023 per Eventus
20
Forensic investigation costs for smishing averaged $350k per Ponemon 2023 update
Interpretation
Financial and Operational Impacts Interpretation
The sheer financial and operational carnage of smishing, from billion-dollar global losses to the crushing downtime and ransoms it triggers, proves this isn't just a nuisance but a systemic threat that bleeds organizations and individuals dry from every angle.
More related reading
04 · Category
Prevalence and Trends19 stats
01
In 2023, smishing attacks represented 12.5% of all mobile phishing incidents reported globally, marking a 47% increase from 2022
02
The FBI's IC3 received over 298,000 complaints about smishing and phishing in 2022, with smishing comprising 8.2% of those
03
Verizon's 2023 DBIR noted smishing as involved in 11% of social engineering breaches in the financial sector
04
Proofpoint's 2024 report indicated smishing attempts rose by 328% year-over-year among enterprise users
05
Lookout's 2023 Mobile Threat Landscape reported 1.2 million unique smishing campaigns detected on Android devices
06
In Q4 2023, Zscaler's analysis showed smishing accounting for 15.3% of mobile malware delivery methods
07
APWG Q1 2024 Phishing Activity Trends reported smishing phishing kits increased by 72% to over 5,200 unique kits
08
IBM's X-Force 2023 Threat Intelligence Index found smishing in 9.7% of identity compromise incidents
09
Splunk's 2023 State of Security report cited smishing as the vector in 13.4% of observed phishing simulations failures
10
Mimecast's 2023 State of Email and Collaboration Security noted smishing cross-referencing email attacks up 41%
11
Smishing detection rates hit 96% with ML models trained on 10M+ SMS samples per Google 2023 Android Security Report
12
EMEA region saw 25% YoY smishing surge in 2023 per ENISA Threat Landscape
13
Asia-Pacific smishing incidents up 55% driven by banking trojans per Interpol 2023 cybercrime report
14
Canada’s Anti-Fraud Centre logged 14,200 smishing complaints in 2023, up 33%
15
Australia’s ACCC received 45,000 smishing reports in 2023 totaling AUD 150M losses
16
EU saw smishing in 7% of GDPR breach notifications in 2023 per EDPB stats
17
India’s CERT-In handled 1.1M smishing incidents in 2023
18
Brazil’s smishing complaints rose 40% to 25,000 via SaferNet 2023
19
South Africa’s ITWeb reported smishing as 12% of cyber frauds in 2023
Interpretation
Prevalence and Trends Interpretation
Our phones have become a relentless digital fishing pond where scammers are not only casting more lines than ever, but they're also using better bait and reeling in victims with alarming and costly success.
05 · Category
Prevalence and Trends, source url: https://www.oas.org/ext/en/cybersecurity/reports/2023-cybercrime-trends-la.pdf1 stats
01
Latin America reported 18,000+ smishing cases to OAS in 2023, category: Prevalence and Trends
Interpretation
Prevalence and Trends, source url: https://www.oas.org/ext/en/cybersecurity/reports/2023-cybercrime-trends-la.pdf Interpretation
While Latin America's 18,000 reported smishing cases to the OAS in 2023 suggest a troubling epidemic, the real number is likely far higher, proving that when it comes to deceptive texts, silence from victims is the scammer's best accomplice.
06 · Category
Victim Demographics20 stats
01
In the US, 68% of adults aged 18-24 reported receiving at least one smishing attempt in 2023 per FTC survey data
02
Women comprised 54.2% of smishing victims reporting to IC3 in 2022, with higher susceptibility in retail banking scams
03
Seniors over 60 years old accounted for 22.7% of smishing financial loss complaints to FTC in 2023, totaling $120 million
04
Millennials (25-40) represented 41% of enterprise smishing click-throughs in Proofpoint's 2023 study of 500 organizations
05
Rural US residents reported 28% higher smishing victimization rates than urban in a 2023 Pew Research study
06
In the UK, 35% of small business owners aged 45-55 fell for smishing per Action Fraud 2023 data
07
Low-income households (<$50k/year) showed 3.2x higher smishing response rates in a 2023 Norton survey of 10,000 users
08
Healthcare workers had 19% smishing victimization rate in HIMSS 2023 cybersecurity survey of 1,200 professionals
09
Students aged 18-22 comprised 15.4% of university-reported smishing incidents in Educause 2023 review
10
African American respondents reported 24% higher smishing encounter rates than average in 2023 AARP fraud watch survey
11
Gen Z (18-24) clicked 2.1x more smishing links than Boomers in 2023 KnowBe4 study
12
Finance professionals had 26% smishing susceptibility in ISACA 2023 survey of 5,000
13
Remote workers reported 31% higher smishing rates per Cisco 2023 hybrid work security survey
14
Teachers in US K-12 saw 22% victimization from edtech smishing per CoSN 2023
15
Veterans reported 19% smishing scams targeting benefits per VA OIG 2023 audit
16
Gig economy workers (Uber/DoorDash) hit by 28% of delivery smishing per FlexJobs 2023 survey
17
Hispanic/Latino US adults had 21% higher smishing report rates per NTIA 2023 digital equity study
18
C-suite executives fell for 14% of spear-smishing SMS per Varonis 2023 insider threat report
19
Parents with children under 18 reported 17% more family-targeted smishing per Common Sense Media 2023
20
Blue-collar workers showed 25% lower awareness leading to higher falls per NIST 2023 workforce cyber study
Interpretation
Victim Demographics Interpretation
From the youngest adults clicking with alarming frequency to seniors losing staggering sums, smishing proves itself a ruthlessly democratic crime, exploiting everything from rural isolation to executive urgency with tailored precision that spares no demographic.
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Marie Larsen. (2026, February 13). Smishing Statistics. Gitnux. https://gitnux.org/smishing-statistics
MLA
Marie Larsen. "Smishing Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/smishing-statistics.
Chicago
Marie Larsen. 2026. "Smishing Statistics." Gitnux. https://gitnux.org/smishing-statistics.
Sources & references
82 datasets cited across this report · attribution is report-level