What is an SMS bomber and why is it a bad idea for advertising?

SMS bombing is a way of mass messaging. The name itself suggests that the method is aggressive, and indeed, it is. A large number of similar messages are sent to the same number within a limited time — meaning it is a mass and targeted assault. This is carried out using special software, a script, or a service. This, in fact, is an SMS bomber.

What is the difference between SMS bombing, SMS spam, and bulk sms, and what should you do if your phone number falls under such a digital attack?

Five uses of bombing

SMS bombing originated in the 2000s. The story of who came up with the idea of sending text messages in such a quantity that a person could no longer use their phone — remains unknown. Similarly, the circumstances of when it first occurred are also unclear.

One could only speculate that initially, many messages were sent to phones purely for entertainment or revenge. After all, why not organize some unpleasant hours for your ex-partner, a principled boss, or a demanding teacher? Especially if a mobile phone for a person is not just a communication tool, but a work instrument?

Over time, software improved, and the approach to its use became more flexible and selective. Today, SMS bombers are most often used for:

1. Cyber trolling — i.e., a malicious but playful digital prank;
2. Cyberbullying — intimidation or harassment using similar technologies;
3. Fraud;
4. Aggressive marketing;
5. Spam attacks.

Bombing vs Spam: Is there a difference?

In most cases, bombing refers to automated mass sendings. The phone number of the potential victim is entered into a special program. There are many such programs, and they are not hard to find in the public domain.

Then, this program may register the provided number on various sites or send a certain number of SMS to it at regular intervals.

Classic bombing

Imagine that your phone is overwhelmed. The device keeps notifying you of new SMSs without stopping. These could be passwords, links, threats, demands, mockeries, or even random symbols.

The content doesn’t matter. The key characteristic of this being organized through spammer SMS is the volume of messages.

In January 2024, reporters and editors of the Ukrainian branch of Forbes received messages for several consecutive days from different stores and microcredit organizations. The number of SMS and Viber messages with registration codes, password changes, etc., exceeded 200 (!) per day for a single number.

Simultaneously, criminals were attempting to hack the banking accounts of these employees.

A similar spam bomber, but with a different motivation and technical focus, was used in 2021 against a journalist from a Crimean publication. The goal of this specific attack was to intimidate the person, with all insults and threats being sent from Russia. A similar situation occurred with another Ukrainian journalist in 2022 after publishing a controversial article.

The first example is similar to fraud using bombing, while the second and third illustrate cyberbullying. The common factor in these stories is that they involve media representatives.

In fact, it is because of this that they received publicity — the general public doesn’t hear about all instances of classic bombing. It’s important to understand that anyone can become a target, regardless of their occupation.

SMS Spam

However, more often people encounter relatively mild bombing. This includes invitations to classes from “English language schools” and consultations from “legal service companies”, i.e., aggressive marketing. Also, offers such as “get a loan”, “win a car” and — of course — play online casino.

All of this is spam, often carried out using the same software as bombing, but with a different frequency of message delivery.

An SMS bomber doesn’t rely on quantity — although sometimes people receive 5 identical messages per day from different numbers. Its uniqueness lies in its boldness, which borders on violating the Law of Ukraine on Advertising and the Law on Personal Data Protection:

• The messages — SMS, Viber, and even phone calls — come from organizations with which the person has never interacted. Accordingly, they did not allow these organizations to advertise products or services via SMS.
• More often, message spammers are used by companies that function at best in the gray sector and at worst in the black market. Therefore, continuing relations with them is costly. Reputable organizations that care about their reputation don’t seek new clients by violating basic advertising ethics.

Additionally, it is now possible to send mass SMS via Telegram. This tool is suitable for both advertising campaigns and friendly giveaways.

However, the bot authors themselves honestly warn that Telegram bombers for business purposes should be used cautiously since they don’t align with the laws of many countries and could negatively affect reputation.

Signs that a promotional message is spam

It’s easy to distinguish a regular promotional message from spam. There are three main signs:

1. Anonymity — i.e., lack of sender identification, automated brand signature. Setting up an Alpha name takes little time and should be considered by small businesses as well.
2. Formatting with many exclamation marks, capital letters, emojis, etc. — one of the characteristics that indicate this is typical SMS flood, which only has one possible reaction — block.
3. Inappropriately generous offers. For example, the trial lesson that the school invites you to will only be free if you later purchase an expensive course. If not — you will still need to pay for the lesson.

What to do if your number is targeted by bombers

Can you protect yourself from bombing? The honest answer is no. This is one case where protecting yourself is practically impossible. At least because our personal data is very poorly protected.

Firstly, there are many open sources, and not everyone has been concerned with protecting private information on social media from the start. Secondly, databases containing client phone numbers from banks and even some state institutions can be found and bought with enough effort.

If your number is being attacked by a spam bomber, it’s important not to panic and remember that this action is limited in frequency, and the bombing will stop in a few days. If it involves threats or attempts at fraud, a report should be filed with the police.

And also, a high flow of SMS with authentication codes doesn’t always mean that your accounts have been hacked. However, caution never hurts. Therefore, in any unclear situation, it’s best to call the bank and possibly temporarily block your card.

Conclusions

How not to gain a reputation as an SMS bomber? It’s simple: use areliable and tested SMS marketing service.

These platforms rely on current legislation not only from Ukraine but also from other countries. Professionals track legal changes and adjust SMS sending rules when necessary. Thus, any time, even on New Year’s Eve, they will guide you on how to set up a campaign considering legal nuances and avoid accidental mistakes.