Police arrest SMS blaster crew that sent malicious messages to thousands across Toronto
Source: TechCrunch
Arrest and Charges
Police have arrested three men and laid 44 charges for allegedly operating an SMS blaster in downtown Toronto. The scheme, which began in November 2025, is described as the first known instance of an SMS blaster operating in Canada, according to a Toronto Police Service statement.
How SMS Blasters Operate
SMS blasters work by spoofing cell towers and broadcasting a stronger signal than legitimate towers in the area, tricking nearby phones and tablets into connecting to the blaster. Once connected, the device can send out thousands of text messages, often containing links to phishing sites that impersonate legitimate login pages. These attacks exploit security weaknesses in older 2G cellular networks. More details on the technique are available in the Cyber Centre guidance on SMS blasters.
Intended Theft and Impact
The operation was aimed at stealing users’ usernames and passwords, including banking credentials. Detective Sergeant Lindsay Riddell explained this motive during a press conference, which can be viewed here.
Police also warned that such devices disrupt nearby cellular communications and can interfere with 911 emergency services.
A photo of a similar SMS blaster recovered in the United Kingdom was released, but Toronto authorities declined to share an image of the device found locally for safety reasons.
Authorities noted that the blaster was uniquely built and operated from the back of a vehicle, enabling it to be moved to multiple locations across Toronto.
International Comparisons
In 2024, Thai police arrested gang members for running a comparable SMS blaster out of the back of a truck in Bangkok. That operation reportedly blasted close to a million text messages over a three‑day period. See the full report here.
Mitigation Measures
- Disable 2G connectivity on your phone to block attempts by SMS blasters.
- Apple device users can enable Lockdown Mode, which turns off 2G radios, providing additional protection. More information is available in the TechCrunch article on Lockdown Mode.