Beware of SMS messages claiming to protect your Pi Coin account—phishing sites are stealing wallets

September 29, 2026 · AhnLab ASEC · Severity: MEDIUM

This article describes a smishing campaign that sends SMS messages pretending to protect Pi Coin accounts, directing users to phishing sites that steal wallet information. The attackers exploit the trust in account protection services to harvest credentials. It underscores the need for caution with unsolicited messages related to cryptocurrency. 📌 **Analyst Note:** As cryptocurrency adoption grows, smishing campaigns targeting specific coins will likely increase. Organizations should advise users to enable multi-factor authentication and never click on links in unexpected SMS messages.

Key Takeaways

A smishing campaign impersonates Pi Coin account protection services to trick users into visiting phishing pages. The SMS messages claim to safeguard the user's cryptocurrency account but actually steal wallet information. This attack targets the growing number of Pi Coin users who may be less security-aware.
The phishing pages are designed to capture cryptocurrency wallet credentials, allowing attackers to drain funds. The campaign uses urgent language in SMS messages to prompt immediate action from victims. Users should verify any account protection messages through official channels before responding.
This attack highlights the increasing sophistication of smishing campaigns targeting cryptocurrency holders. Threat actors are leveraging the popularity of specific coins like Pi to craft convincing lures. Mobile users must be vigilant about unsolicited SMS messages and avoid clicking on embedded links.