How scammers use fake insurance texts to steal your identity

This advisory outlines how insurance-themed SMS scams (smishing) leverage social engineering to elicit personal information, money, or identity documents, noting common red flags (no company name, unsolicited contact, excessive data requests) and timing around enrollment periods. It recommends not responding, independently verifying senders, checking URLs, limiting data shared, keeping software updated, using real-time anti-malware with web protection, and following a STOP framework (Slow down, Test them, Opt out, Prove it) to reduce risk.