Pretty much anything, which is why you shouldn’t follow them. Any device will have security vulnerabilities, it’s just the nature of technology. So the link could exploit one of those vulnerabilities and give them access to your phone. They might also be relatively benign, maybe only noting that your phone number is valid and receiving texts for use later in another phishing attempt. Or trying to harvest other info like your cell service provider. Or it might do nothing.
Latest Answers