SMS and messaging-app phishing
Recognise malicious links and impersonation in SMS, WhatsApp, Teams and other messaging platforms.
Why this matters
Short messages reduce context and often appear on personal devices. Attackers use delivery alerts, account warnings and impersonation to trigger immediate action.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- Unknown or newly changed number
- Shortened link
- Message claims to be a colleague with a new phone
- Unexpected verification code request
- Urgent payment or gift-card request
- Account warning with immediate deadline
What to do
- Do not tap unexpected links
- Verify the person through a known channel
- Open the relevant app directly
- Block and report malicious senders
- Never forward authentication codes
Frequently asked questions
Are messages from a colleague’s photo trustworthy?
No. Profiles and names are easy to copy.
What if the message says they changed number?
Verify using the old number or another known channel.
Should codes be forwarded?
Never.
Angvlar Security Awareness