Can the apparent sender of an SMS be spoofed?¶
Yes. Internet gateways, bulk platforms and sender-presentation services can substitute a familiar number or brand label, so the displayed sender is not always the originating subscription or device.
Follow infrastructure beyond the label¶
Preserve the message, sender field, time, links, callback numbers, payment destinations and reply behaviour. Matching presentation can cause a device to group a fraudulent message with genuine earlier traffic.
Provider, gateway and campaign records may identify the route into the network. Link destinations, domains and related account events can be more attributable than the visible sender.
Keep possibility and proof distinct¶
Unusual SMS does not mean spoofing occurred; test the actual routing and service behaviour. A spoofed presentation may not receive replies, while another service could forward them.
Report what the handset displayed separately from the evidenced origin, using specialist interpretation where routing is material.
The point to remember
Treat the SMS sender field as presentation until network, gateway or linked-infrastructure records establish the true source.