The Rise of SMS Blasters: How Cybercriminals Are Hijacking Phones With Fake Cell Towers

Scam text messages are nothing new. For years, fraudsters have bombarded mobile phones with fake delivery notifications, bogus bank alerts, and phishing attempts. But in 2025, a new tool is changing the scale and reach of these attacks—and it’s something that your mobile carrier cannot stop.

Enter the SMS blaster, a portable device capable of impersonating a cell tower and pushing fraudulent messages directly to nearby phones. Unlike traditional text scams that travel through legitimate telecom networks (where providers can filter or block them), SMS blasters operate outside the system, making them virtually undetectable by mobile carriers’ defenses.

What Exactly Is an SMS Blaster?

At its core, an SMS blaster is a small, portable device—sometimes small enough to fit in a backpack—that acts like a fake phone mast, also known as a cell-site simulator. Once activated, it tricks nearby devices into connecting by pretending to be a legitimate 4G tower, before downgrading them to insecure 2G signals. Within seconds, it can send scam messages en masse.

“The whole process—4G capture, downgrade to 2G, sending of SMS and release—can take less than 10 seconds,” explains Cathal Mc Daid, VP of technology at telecom security firm Enea. “People receiving the messages may not even notice it’s happened.”

According to law enforcement reports, some SMS blasters can send messages to every device within a 1,000-meter radius, pushing out up to 100,000 texts per hour.

A Global Surge in Use

Originally detected in Southeast Asia, SMS blasters are now spreading across Europe and South America. Authorities in Switzerland recently issued a national warning, while London police have seized multiple devices. Arrests linked to SMS blaster use have also been reported in Thailand, Japan, Brazil, and Qatar.

The technology itself isn’t new. Similar “IMSI catcher” devices—nicknamed Stingrays—have long been used by governments and law enforcement for surveillance. But now, criminals are repurposing this once niche technology for mass fraud.

Why Carriers Can’t Protect You

Over the past few years, mobile providers have stepped up their efforts to combat scams. UK telecom Virgin Media O2, for example, claims it blocked more than 600 million scam texts in 2025 alone. But SMS blasters sidestep these defenses entirely.

“None of our security controls apply to the messages that phones receive from them,” says Anton Reynaldo Bonifacio, Chief Information Security Officer at Globe Telecom in the Philippines. “Once phones are connected to these fake cell sites, they can spoof any sender ID or number to send the scam message.”

How Criminals Deploy Them

Investigations show that many of the people operating SMS blasters are not skilled hackers. Instead, they’re often paid to drive around in cars or vans with the equipment running—blasting neighborhoods, business districts, or transport hubs with waves of phishing texts.

Researchers have even found SMS blasters openly listed for sale online, with prices running into the thousands of dollars.

How to Protect Yourself

While you can’t control whether your phone connects to a fake tower, there are a few defenses:

• Disable 2G connectivity in your phone’s settings. Both Android and Apple devices now allow this, although Apple’s feature is tied to its Lockdown Mode.

• Be cautious of unexpected links. Whether it’s a message about an unpaid toll, package delivery, or banking alert, take a moment before clicking.

• Report suspicious texts to your mobile provider or relevant national authority.

As Ben Hurley, a detective sergeant with London’s Dedicated Card and Payment Crime Unit, points out: “It’s a new way of doing the same thing. The delivery method has changed, but the end goal is still to get you to click a link and hand over personal information.”

The Cat-and-Mouse Game Ahead

Experts warn that today’s SMS blasters are relatively unsophisticated compared to what could emerge in the future. “If criminals gain access to more advanced technology and expertise, this could be the beginning of a cat-and-mouse game,” Mc Daid cautions.

For now, the best defense remains awareness. Scam texts may arrive in new ways, but the advice is the same: stay skeptical, verify before clicking, and remember that if a message feels off, it probably is.

Photo Credit: DepositPhotos.com