Smishing Campaigns

As of November 2022, the Portal offers the ability to send out simulated phishing text messages. These are called "smishing campaigns". 

In order to be able to create a smishing campaign, your account must have the smishing feature as well as an active Twilio integration. (The article Integrating an Account with Twilio discusses how to set up a Twilio integration.) After successfully configuring a Twilio integration on your account, the Twilio integration card will be lit up as active on the Intgration Store page (Administration > Integration Store). 

With an active Twilio integration, the first step in the campaign wizard will include an option to create a smishing campaign.

In the next step in the campaign wizard, you will be required to turn on the "Verify Opt-In" toggle. (This verifies that you are authorized by the owners of the phone numbers included in this test to opt these phone numbers in to receiving text messages from our platform. Fines for opting in phone numbers that you are not authorized to opt in can be anywhere from $500-$1500.) 

After you select a group, the number of targets with valid phone numbers will appear below the word "Group(s)". If there are 3 targets in the group, and only 1 has a valid phone number, then it will show 1/3, as shown below.

On the template selection step, you can pick the templates to include in the smishing campaign. Smishing templates cannot be customized. You may only use the predesigned smishing templates available from the library.