If you thought email phishing was public enemy number one, here’s food for thought: while the public is most familiar with email scams, smishing is far more efficient. Recent 2026 data shows SMS phishing campaigns boast click rates between 8.9% and 14.5%, compared to a humble 2% for emails. That means people are up to five to seven times more likely to fall into the trap via SMS. Once the underdog compared to email, SMS today accounts for nearly 35% of all phishing attacks—and its prevalence shot up by 40% over the last year. Understanding what makes this method so devilishly successful is the first step in protecting yourself.
In cybersecurity company simulations, the “click rate” measures the share of recipients who interact with a fraud link. Email hovers at a modest 1.4 to 2%, held back by spam filters, security alerts, and years of user education. On SMS, the numbers skyrocket; some campaigns targeting poorly-prepared people hit 25% or even higher. Here’s the twist: it’s not because the messages are particularly sophisticated, but because of the channel itself—an SMS is read almost instantly, and users tend to let their guard down.
Fraudsters have found SMS to be a goldmine for several reasons:
But structural factors also strengthen smishing’s punch. SMS messages boast a staggering 98% open rate—most read within just three minutes—whereas emails often go ignored for much longer. Your phone’s small screen hides the full link, making it tough to check where you’re actually headed before clicking. There’s also a stronger, almost nostalgic trust in SMS; these messages still feel personal and secure. Meanwhile, emails have benefited from increasingly sturdy spam filters and workplace security trainings—protections still rarely found on mobile.
The golden rule: never click on a link in a text before verifying the sender’s legitimacy independently—always use the company’s official website or app to check directly. In France, you can report a suspicious SMS to 33700 (the national platform for reporting fake SMS) and delete it without replying to help stop the scam’s spread. Enabling your mobile provider’s SMS spam filters and keeping your guard up—even when a text seems to come from someone you know—are the best ways to avoid joining the growing ranks of smishing victims.

source