2026-10-27
Is this text a scam?
Subject: Please verify your login
SCAM
EElection Portal <[email protected]>
Text Message · Today 9:41
Your login for the county election portal needs a check. Please verify your login now: https://portal-verify.example/login
Thank you,
Portal Team
Recreated from Source 1 (FBI IC3 PSA), which describes phishing emails that closely resemble legitimate communications, push targets to click malicious links, and try to get them to disclose login credentials. The exact wording, sender name and portal name are invented for this example.
3 red flags
- RED FLAG 1Looks like real mailThese fakes are built to look like real messages, so they are hard to spot.
Source: “In recent years, these actors have crafted increasingly sophisticated phishing and smishing campaigns that closely resemble legitimate communications, making it difficult for targets to distinguish fraudulent messages.” link - RED FLAG 2Asks for loginThe whole point is to trick you into giving up your login details.
Source: “Such precautions are critical to remaining vigilant for phishing and smishing attempts that try to manipulate the recipient into disclosing sensitive information, such as login credentials or financial information, or that install malware on their devices.” link - RED FLAG 3Link to tapThat link is the trap, and real-sounding words make clicking it more likely.
Source: “SI allows malicious cyber actors to create language that appears genuine, using native languages and common vernacular, making it more likely for potential victims to click malicious links or inadvertently expose information through direct interaction with threat actors.” link
Safe move
Confirm another way
Before you share any login, confirm the request through a separate channel you trust.
Source: “Employees should confirm, if possible, requests for sensitive information through secondary channels.” link
Before you share any login, confirm the request through a separate channel you trust.
Source: “Employees should confirm, if possible, requests for sensitive information through secondary channels.” link
Send this to the one who'd tap it.
Watch the video Play today's round More from Scam or Not