New Jersey residents should be aware of a new SMS text phishing message scam, known as SMiShing according to the New Jersey Cybersecurity & Communications Integration Cell (NJCCIC).

The fraudulent messages impersonate the New Jersey Department of the Treasury’s Division of Taxation and claim that a taxpayer’s refund request has been processed and approved. Victims are instructed to provide bank or payment information so funds can be deposited. The messages warn that failure to respond will result in forfeiture of the refund.

Authorities say the links provided in these messages likely lead to fake websites designed to mimic the Division of Taxation’s branding in order to steal financial account details. The campaign uses tactics seen in earlier scams, including false claims of motor vehicle violations or unpaid toll fees.

One notable technique involves instructing recipients to “Reply ‘Y’” before clicking a link. On iPhones, links from unknown senders are disabled by default. By getting the user to reply, scammers reactivate the hyperlink and increase the chance of the victim clicking it. Many of the messages are being sent through iMessage or RCS, which allows scammers to bypass traditional SMS spam filters.

Sender IDs often include foreign phone numbers — such as those originating from the Philippines, Canada, or the United Kingdom — or random-looking email addresses, further indicating the messages are fraudulent.

Officials urge residents to be alert for warning signs of text scams, including:

• Unexpected requests for personal or financial information.

• Suspicious or unfamiliar links.

• Urgent instructions to take immediate action.

The NJCCIC recommends that anyone who receives a suspicious text message:

• Forward the message to their carrier’s spam reporting service (often 7726).

• Report the scam to the NJCCIC, the FBI’s Internet Crime Complaint Center (IC3), and the Federal Trade Commission (FTC).

• Block the sender’s number to prevent future messages.

• Contact the referenced organization directly using its official phone number, rather than replying to the message or clicking the link.

Residents are also urged to be cautious of spoofed phone numbers, which may appear to come from legitimate sources