A Free Educational Resource Created by Carnegie Mellon University to Empower You to Secure Your Part of Cyberspace

SMS Spam

Junk mail sent to mobile phones

SMS spam or cell phone spam is junk mail delivered to mobile phones. It is usually delivered through SMS (Short Message Service).

Generally SMS spam consists of a simple message telling you to call a phone number. If you return the call, you will be dialing a premium-rate number, and the attacker will try to keep you on the line as long as possible in order to get the most money from you.

A new Trojan horse has recently been circulating that infects personal computers and uses them to send SMS spam to mobile phones. Once the PC is infected, the Trojan contacts a Web site to get information on the spam the attacker wants to send. It then generates a series of cell phone numbers and delivers the spam to them.

Protective Measures

Practices

  • Do not open text messages from people you don’t know: An example of SMS spam is shown below. Do not react to this type of SMS message from an unknown sender. Contact your wireless service or Internet service provider about unwanted messages.

    SMS Spam

  • Put your mobile phone number on the Do-Not-Call Registry: Putting your number on the National Do-Not-Call Registry  helps you avoid telemarketing calls, and registering on the Web site is free. If you still receive calls after registering, you can file a complaint on the Web site.

  • Don’t provide your mobile phone number or email address in public forums: This includes newsgroups, chat rooms, Web sites, or membership directories.

  • Check Web site privacy policies: When submitting your mobile phone number or email address to any Web site, find out if their policy allows the company to sell your information to others.

Legal

The Federal Communications Commission has voted to outlaw all commercial text messages to mobile phones and pagers unless the device owner has given permission, and to subject violators to the CAN-SPAM Act of 2003.

You may file a complaint with the FCC if you receive:

  • An unwanted commercial message sent to a wireless device
  • A telephone solicitation made to a wireless device for which the phone number is registered on the National Do-Not-Call Registry
  • Any autodialed text message on your wireless device, or an unwanted commercial message to a non-wireless device from a telecommunications company or advertising a telecommunications company’s products or services

Visit the FCC Web site  to learn how to file a complaint.

References

Links

My home page