Raising employees’ awareness of smishing helps reduce manipulation risks and protects your company’s sensitive information from SMS-based attacks.
1 – Objectives
Plan your smishing campaign
Target employees to train with your smishing campaign
Select one or multiple relevant scenarios
2 – Prerequisites
Have access to the Smishing module in the Arsen platform
Have previously configured the phone numbers of the targeted employees
Have the required permissions to launch a campaign
3 – Accessing campaign creation
Click
Campaignsin the Smishing section of the main menuClick
+ New Campaignto start configuration
4 – Scheduling your campaign
4.1 – Campaign name
Enter a name for your campaign
4.2 – Choose the campaign type based on the objective
Define whether your campaign aims to evaluate or train employees.
4.2.1 – Assessment Mode
Assessment mode evaluates employee behavior under the most realistic conditions possible.
Select
AssessmentRedirect users to a URL of your choice after a compromise
Avoid replaying the SMS on a training page to remain discreet
4.2.2 – Training Mode
Training mode adds a training page after a click or compromise to educate the employee at the moment of their mistake.
Select
TrainingRedirect users to the micro-learning page after a click or compromise
Replay the SMS and highlight the indicators the employee should have noticed
A link is provided explaining the differences between training and assessment campaigns.
📚 Good to know
Unlike phishing campaigns:
no whitelisting or allow-listing is required
SMS are sent using high-reputation numbers to maximize deliverability
5 – Selecting the employees to target
Click
Continueto access the targeting step
Two options are available:
Employees: select individuals or the whole organization
Groups: target one or multiple predefined groups
Click Continue to select a scenario.
6 – Choosing the scenario
Select your scenario by clicking Select on the scenario card
You can — and are encouraged to — select multiple scenarios.
They will be distributed randomly among your employees throughout the campaign.
Click Continue to access the campaign summary.
7 – Define the sending schedule of your smishing campaign before launch
A set of actions is available to help you manage the sending days and the sending pace of your SMS messages.
7.1 – Number of targeted employees
Indicate how many users will actually be contacted (Employees involved).
Employees without a phone number are automatically excluded from the campaign.
7.2 – Choose the campaign start date
Allows you to specify a precise date when the campaign should start in the future.
If no action is taken on this setting, the start date is scheduled for now.
7.3 – Define the days and times when SMS messages will be sent
Click on
Sending Window.Select the days on which SMS messages will be sent.
Select the time slot for sending SMS messages.
Adjust your time zone if necessary to match the targeted area.
⚠️ Warning
If you select January 23 but this date does not correspond to one of the weekdays defined in the sending window, the campaign will start on the first day after January 23 that matches one of the selected weekdays.
7.4 – Choose the sending frequency of your SMS messages
Three options are available:
Slow: Sends SMS messages at the slowest pace.Medium: Distributes SMS messages between very fast and very slow speeds.Fast: Sends all SMS messages as quickly as possible.
Depending on the selected execution speed, SMS messages may be sent over several days or even several months.
7.5 – Scenario summary
The selected scenarios appear as thumbnail images in the Scenarios section.
7.6 – Launching the campaign
Click the Launch button at the bottom of the page to start your campaign.
