Clickbait to Checkmate: SMS-Based Scam Targets Us Smartphones and Accesses Victim Locations

**Executive summary:** This report analyzes a widespread US-targeted SMS-phishing (smishing) campaign that sends spoofed messages impersonating services (USPS, Amazon, FedEx, etc.), redirects victims through short-lived tracking domains to personalized phishing/survey pages, and collects PII and payment card data; the campaign uses geographic/IP filtering, push-notification APIs, rapidly expiring landing pages to evade researchers, and publishes multiple IPs/domains as IoCs.