"Don't Click Deposit Messages Recklessly"... KakaoBank: "Most Smishing in H1 Disguised as Financial Transactions"

KakaoBank Analyzes 10,024 Suspected Smishing Messages

KakaoBank announced on July 8 that an analysis of 10,024 suspected smishing messages received through the "AI Smishing Message Checker" service in the first half of this year found that 33% were financial transaction-related smishing, making it the most common type.

This statistic is based on data received from January to June 2026 and was classified by type after analyzing key keywords by the KakaoBank AI Data Driven Team.

Following financial transaction-related smishing, the most common types were identity verification and personal information checks (28%), public institution notifications (13%), parcel and delivery (11%), others (10%), and acquaintances or event notifications (5%).

Financial transaction-related smishing frequently involved luring users to phishing sites or installing malicious applications (apps) by mentioning payment approvals, deposits, refunds, or account checks. The identity verification and personal information check type typically employed tactics such as pretending to conduct account security checks or verifying personal information, thereby provoking anxiety among users.

Cases of public institution notifications, parcel and delivery, and acquaintances or event notifications were also consistently identified, using familiar topics such as traffic violation notices, delivery tracking, or wedding and funeral announcements to induce users to click on links.

The Korea Internet & Security Agency (KISA) recommends, to prevent smishing damage, that users do not click on internet addresses from unknown sources, always verify that the site address matches the official site, and only enter personal information such as mobile phone numbers, IDs, passwords, and authentication codes on trusted sites.

A KakaoBank representative said, "Smishing techniques are quickly evolving to reflect social issues and users' daily lives. If you receive a suspicious message, we recommend checking it first through the 'AI Smishing Message Checker' service before clicking on any links."

This content was produced with the assistance of AI translation services.