Slamming, Smishing, Spoofing, and the Voicemail Door
When the Number Lies and the PIN Is Still 12345
Some attacks steal the conversation. Others steal the label on the conversation—or the quiet box where messages wait. This page is a glossary of those moves, ending where many people never look: the voicemail PIN.
1. Slamming
Slamming is when a company illegally switches you from your existing phone service to their own service without your permission.
You did not shop. You did not sign. The bill simply changes hands. It is fraud dressed as a provider swap—cousin to unauthorized porting and subscriber fraud, aimed at the account relationship rather than only the handset.
Rule of thumb: Unexpected carrier-change notices deserve a call to your known provider number—not a callback to the notice itself.
2. Smishing (SMS phishing)
Smishing is short for SMS phishing. Messages often claim to be from your bank or another company and display a call to action: tap here, verify now, unlock your account, claim a refund.
Same grammar as email phishing, smaller screen, higher urgency. The link is the payload; the costume is the brand.
Rule of thumb: Banks you already use have apps and bookmarked sites. They do not need a surprise text to “save” you. Delete, or open the app yourself.
3. Social Security number scams
Callers pose as government officials, often from the SSA, to request your Social Security number or a payment.
Threat scripts are common: benefits suspended, warrant pending, “confirm your SSN to clear this up.” Real SSA contact patterns do not require gift cards, secrecy, or SSN recited into a cold call. This is the identity-master-key attack from the due-caution checklist, wearing a federal badge.
Rule of thumb: Hang up. Use ssa.gov or a number from a statement you already have. Never pay SSA “debt” with gift cards.
4. Spoofing
Spoofing occurs when a caller maliciously transmits false caller ID information to raise the odds you will answer—local numbers, “IRS,” your bank, even your own number in some schemes.
Caller ID is a costume, not a credential. Spoofing is why “it said it was the hospital” is not verification.
Rule of thumb: Treat inbound ID as unverified advertising. Identity is proven by you calling out on a known channel.
5. Voicemail system hacking
The notes open with a quiz that should sting:
Quick—what’s your voicemail PIN? Don’t know? It could be the default 1-2-3-4-5, or maybe it was never set up at all.
Security experts warn that voicemail is often overlooked on personal and business accounts amid louder online threats. The vulnerability section is direct:
- If you don’t change default passwords on voicemail accounts, you or your company can face an expensive surprise.
- Attackers who compromise voicemail can steal personal and financial information, or reach financial and social accounts by intercepting two-factor verification codes left as messages.
- Some hackers have reportedly monitored incoming business voicemail and answered callers by text, sending payment links or asking for details.
That last move is especially cruel: the victim thinks they reached a real office; they are texting a watcher who sits on the mailbox.
Voicemail compromise pairs with porting / SIM swap (articles 20–21): steal the number or steal the box that receives the number’s secrets. Either way, the OTP kingdom falls.
Rule of thumb: Set a non-default voicemail PIN on every line you own. Prefer app-based 2FA over voice/SMS where possible. If business lines matter, treat voicemail like a privileged inbox—monitor it, restrict it, and never leave it on factory settings.
Shared map
| Term | What breaks | Classic ask |
|---|---|---|
| Slamming | Your carrier relationship | Silent switch of service |
| Smishing | Your thumb on a link | “Verify / unlock / claim” by SMS |
| SSN / SSA pose | Identity master key | Number or payment under threat |
| Spoofing | Trust in caller ID | Answer because the label looks safe |
| Voicemail hack | The message box + 2FA codes | Default PIN; text replies from watchers |
Together with phishing, porting, and romance hooks, the series now covers voice, text, email, identity labels, and the leftover PIN nobody changed.
Closing
Slamming steals the contract. Smishing steals the tap. Spoofing steals the name on the ring. SSA theater steals the number that opens the rest of your life. Voicemail hacking steals the room where your codes wait in the dark—sometimes answering your customers for you.
Change the PIN. Distrust the label. Open the bank app yourself. The cheapest lock is still a lock if you actually turn it.
Draft for principal / counsel review. Source: handwritten page on slamming, smishing, SSN scams, spoofing, voicemail hacking. Not legal advice.