A Surge in Text Message Scams Targets Younger Americans

KnowBe4 Team | Oct 13, 2025

SmishingA new report warns of a significant spike in SMS phishing (smishing) scams targeting younger Americans between 18 and 29 years old.

The report, released by Consumer Reports, Aspen Digital and the Global Cyber Alliance, also found that 30 percent of people who experienced a cyberattack or scam this year said it began over a text message or a messaging app, compared to 20 percent last year.

“Phishing was still the most common type of scam or attack that people experienced, with 39 percent of those who had experienced an attack or scam saying that the scam used messages or emails purporting to be from a legitimate source asking for personal information,” the researchers write.

Additionally, the report states, “Nearly half of American consumers have personally encountered a cyberattack or a digital scam. Alarmingly, 1 in 5 of those who say they have personally encountered a scam or cyberattack—or about 1 in 10 Americans overall—say they lost money to the scam.”

Users can protect themselves against scams by following security best practices. Komal Bazaz Smith, Chief Business Officer of the Global Cyber Alliance, stated, “Many scams succeed not because of technical genius but because people don’t know or don’t follow basic steps to protect themselves.

“Strong passwords, multi-factor authentication, privacy-protecting web browsers – these things aren’t glamorous, but they are lifesaving. As this report makes clear, real progress depends on collective action: individuals making safer choices, industry building more secure products, and governments holding criminals accountable.”

AI-powered security awareness training can give your organization an essential layer of defense against social engineering attacks. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 HRM+ platform to strengthen their security culture and reduce human risk.

Consumer Reports has the story.


Find out if your organization's MFA solution
can be hacked by cybercriminals now!

Did you know that all MFA mechanisms can be hacked, and in some cases it's as simple as sending a phishing email? That's why it's important to know the exact security risks your MFA solution has and how your users' accounts may be compromised.

masareport-thumbHere's how MASA works:

  • You will receive a custom link to take your assessment
  • Answer a series of technology questions relevant to your MFA solution
  • Get an instant high-level snapshot of potential risks with your MFA
  • Receive your in-depth report packed with actionable insight and detailed analysis on specific MFA attacks and tips for your top defenses 

Assess My MFA Solution Now!

PS: Don't like to click on redirected buttons? Cut & Paste this link in your browser:

https://www.knowbe4.com/multi-factor-authentication-security-assessment



Subscribe to Our Blog


Gartner Magic Quadrant




Get the latest insights, trends and security news. Subscribe to CyberheistNews.