A Surge in Text Message Scams Targets Younger Americans

KnowBe4 Team | Oct 13, 2025

SmishingA new report warns of a significant spike in SMS phishing (smishing) scams targeting younger Americans between 18 and 29 years old.

The report, released by Consumer Reports, Aspen Digital and the Global Cyber Alliance, also found that 30 percent of people who experienced a cyberattack or scam this year said it began over a text message or a messaging app, compared to 20 percent last year.

“Phishing was still the most common type of scam or attack that people experienced, with 39 percent of those who had experienced an attack or scam saying that the scam used messages or emails purporting to be from a legitimate source asking for personal information,” the researchers write.

Additionally, the report states, “Nearly half of American consumers have personally encountered a cyberattack or a digital scam. Alarmingly, 1 in 5 of those who say they have personally encountered a scam or cyberattack—or about 1 in 10 Americans overall—say they lost money to the scam.”

Users can protect themselves against scams by following security best practices. Komal Bazaz Smith, Chief Business Officer of the Global Cyber Alliance, stated, “Many scams succeed not because of technical genius but because people don’t know or don’t follow basic steps to protect themselves.

“Strong passwords, multi-factor authentication, privacy-protecting web browsers – these things aren’t glamorous, but they are lifesaving. As this report makes clear, real progress depends on collective action: individuals making safer choices, industry building more secure products, and governments holding criminals accountable.”

AI-powered security awareness training can give your organization an essential layer of defense against social engineering attacks. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 HRM+ platform to strengthen their security culture and reduce human risk.

Consumer Reports has the story.

Find out if your organization's MFA solution
can be hacked by cybercriminals now!

Did you know that all MFA mechanisms can be hacked, and in some cases it's as simple as sending a phishing email? That's why it's important to know the exact security risks your MFA solution has and how your users' accounts may be compromised.

masareport-thumbHere's how MASA works:

  • You will receive a custom link to take your assessment
  • Answer a series of technology questions relevant to your MFA solution
  • Get an instant high-level snapshot of potential risks with your MFA
  • Receive your in-depth report packed with actionable insight and detailed analysis on specific MFA attacks and tips for your top defenses 

Assess My MFA Solution Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

https://www.knowbe4.com/multi-factor-authentication-security-assessment

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.