Can someone else use your number to text?
As gaming content creators, our phone numbers are vital for accessing game accounts and two-factor authentication. So the idea that scammers could hijack our numbers to steal hard-earned stats and rare gear is scary. Unfortunately, a devious new fraudulent practice called SMS spoofing makes it possible.
In this guide tailored to fellow passionate gamers, I’ll cover everything we need to know to keep our numbers — and game accounts — secure.
What is SMS Spoofing?
SMS stands for “short message service” – otherwise known as text messaging. SMS spoofing is when cybercriminals use technology to disguise or “spoof” the sending number that appears when they send text messages.
By making texts appear to come from phone numbers they don’t actually own, scammers boost their success tricking us into clicking malicious links, handing over log-in codes for our game accounts, or downloading info-stealing malware onto our phones.
The Ugly Truth: Yes, Someone Can Spoof Your Number to Send Texts
Imagine grabbing a snack, sitting down at your rig, booting up your favorite MMORPG, and then getting a notification that you just received a text…from your own number!
As shocking as it sounds, SMS spoofing makes it possible for someone else to send texts making them look like they came from your phone number. And according to data from Truecaller Insights, roughly 10% of all spam texts sent in the US now use SMS spoofing, with gaming scams seeing alarming growth.
So why is SMS spoofing the latest weapon-of-choice for shady in-game fraudsters? Let’s dig in…
How Criminals Spoof Phone Numbers to Send Texts
Swiping someone’s number to spoof takes know-how. Based on research and talks with telecom cybersecurity experts, here are the most common tactics I’ve learned scammers use:
Online SMS Spoofing Services
Unfortunately, shady websites exist offering SMS spoofing-as-a-service options that make phone number fraud disconcertingly easy. After paying a monthly fee, criminals simply log onto these spoofing services, enter any phone number they want to impersonate along with the phishing text, click send, and the fake text gets blasted out to victims appearing to originate from that spoofed device.
According to 2022 FBI reporting, losses associated with SMS spoofing topped $137 million — much of it tied to gaming account theft.
Voice-over-IP (VoIP) Apps
VoIP apps like Skype, WhatsApp, and Google Voice provide phone service over the internet. With the right configurations, these apps allow changing the name and sending number on outgoing calls and texts.
So unlike external spoofing services, devious users can self-modify VoIP apps on their own devices to disguise the originating number to their liking when sending texts to potential victims.
Hacking a Victim’s Online Account
Recently, phishing attacks aimed at stealing gamers’ phone account credentials have surged. After using phishing links to trick victims into handing over log-in information, attackers then access and tweak account settings to enable sending spoofed texts from that line.
My fellow gaming hackers and modders may groan hearing this, but tools and tactics we use splicing game code can be used for evil to hijack accounts and spoof SMS sending capabilities.
Cloning a SIM Card
Your phone’s SIM card pairs your device to your designated number and account. Devious criminals with physical access to your phone can use SIM cracking tools to extract and copy authentication data onto a blank SIM, creating a clone tied to your number in their device.
Once cloned, the imposter SIM allows sending SMS texts spoofing messages from your number that appear on recipients’ phones exactly like regular, legitimate messages sent from your actual device would.
| SMS Spoofing Method | Risk Level | Prevention Tips |
|---|---|---|
| Online Spoofing Services | High | Avoid clicking links, use blocking apps |
| VOIP Apps | Medium | Add account security provisions |
| Account Hacking | High | Enable multi-factor authentication |
| SIM Cloning | Low | Physical control of phone required |
With tens of billions in gaming assets now tradable as NFTs, it’s no wonder phone number fraud continues rising. But don’t panic. As long as we stay informed and proactive, we can equip our gaming communities to beat SMS spoofing at its own game.
Why Scammers Want Your Phone Number
Like an extremely rare artifact our favorite game protagonists might wield, our phone numbers hold tremendous power in the hands of a savvy scammer. Here are the top reasons criminals covets gamers’ digits:
1. Accessing Gaming Accounts
When attempting to log into gaming accounts, many providers let users recover forgotten passwords by sending password reset links or codes to associated phone numbers on file. Once in, hijackers can drain lootboxes, swipe gameplay weapons and assets to resell, delete or level down characters, and wreak general havoc.
2. Stealing 2FA Codes
Lots of game logins now utilize multi-factor authentication tied to users’ cell numbers. By redirecting texts with login codes to devices they control, criminals verify ownership and access accounts without needing stolen passwords.
3. Installing Ransomware
Texts pretending to be gaming companies often contain links to fake game updates. Tricked users who click unknowingly install ransomware allowing device lockouts, gameplay sabotage, and data encryption until paying hefty decryption fees.
4. Porting a Number to a New Carrier
With enough stolen personal details, scammers can contact carriers while posing as game account holders. Then they request porting your number to a device and SIM card owned by them, severing your access while assuming full control to receive sensitive texts without raising suspicions.
Could You Be At Risk for SMS Spoofing?
Wondering if SMS scams are something you need to worry about as a gamer? Ask yourself these questions:
- Do you use your phone number for any game account verification?
- Have you noticed an uptick in unsolicited gaming texts with odd links and attachments lately?
- Do you engage in risky gaming behaviors like buying accounts, using mod menus, or sharing logins across forums and Discord?
- Have you ever lost a phone or feared a past device may have been hacked before replacing it?
If you answered yes to any, then there’s a chance your number could be vulnerable to SMS spoofing aimed at your gaming accounts. But there’s good news – advanced prevention solutions exist far beyond just “don’t click suspicious links.”
How to Protect Your Number from SMS Spoofing
Fighting back begins with proactive self-defense measures, secure two-factor authentication methods, and anti-fraud apps.
Watch for Red Flag Texts
Keep sharp for odd texts with features outlined here, then delete unopened:
- Sent from your own number (spoofed)
- Contain shortened or obscured URLs like bit.ly links
- Have message content unrelated to purported sender
- Request sensitive data or account actions via text
Avoid SMS-Based 2FA
When available, opt for non-SMS forms of two-factor authentication using Authy or Google Authenticator apps. Generate codes locally off-device without transmitting via interceptable SMS texts.
Also require PINs at transfer initiations when gifting items in multiplayer games to block potential SIM swapping requests aimed at porting your number.
Run Anti-Spoofing Caller ID Apps
Top providers like Truecaller, RoboKiller, and Hiya can detect spoofed calls and texts, alert on suspicious numbers not to answer, and automatically block likely scammer messages. Pay for premium versions providing enhanced caller profile lookups for stronger protection.
Comparison of Premium Anti-Spoofing Apps:
| App | Monthly Cost | Gamers‘ Rating | Top Features |
|---|---|---|---|
| Truecaller Premium | $3.99 | 8/10 | Spoof tagger, spam reporter, reverse lookup |
| RoboKiller | $3.99 | 9/10 | Answer bot waste scammer time |
| Hiya Premium | $2.99 | 7/10 | Neighborhood spoof alerts |
Limit Number Sharing
Be stingy providing your phone number online, especially via gaming chat channels. Disable linking SMS to social accounts when possible. Regularly search the web for exposures, opting out where found.
If signs of spoofing arise, immediately contact carriers and game companies while enacting stronger authentication protections everywhere possible numbers are stored. Require proof of ID for changes.
The Forecast for SMS Spoofing in Games
Looking ahead, SMS hacking associated with gaming account theft and catphishing continues sharply rising. Losses topped $100 million globally last year, with 2023 projections forecasting as much as a 60% year-over-year surge.
The release of ambitious new cross-platform interactive metaverse environments in 2024 and beyond figures to further fan flames with pooled gaming assets stored as NFTs tradable between mobile, PC, AR, and VR increasing rewards for hackers exponentially.
As early gaming world pioneers and influencers, we must band together sharing the realities of SMS spoofing, its projection dangers, and preventative strategies across gaming forums, videos, live streams, Discord groups, and beyond to steer our collective future to one of awareness and action.
Stay safe on the streets…and servers, gamers. But should scammers come knocking, you now have the knowledge to send them packing without surrendering your pride and digital treasures.
Game on safely!
