The rollout comes as the smishing problem has moved from annoyance to actual epidemic. According to Robokiller data cited by Surfshark, American mobile phones received an estimated 19.2 billion spam texts per month in 2023, a figure that has roughly tripled since 2021. The FTC’s 2023 Consumer Sentinel Network Data Book puts the direct financial damage even higher, reporting that Americans lost $373 million to text-based scams in that single year, nearly a 15% increase over 2022. Scam Text Protection is Surfshark’s attempt to close that particular gap without requiring users to manually vet every message they receive.
Get Surfshark With Scam Text Protection
What Surfshark Just Added to Its Mobile Apps
The feature runs entirely on the device and screens incoming messages against a set of scam pattern indicators built from URLs, sender phone numbers, and message content. When it flags a message as likely fraudulent, the behavior depends on the operating system. On Android, Scam Text Protection sends a real-time notification alerting you that a suspicious message just arrived, giving you the opportunity to review or delete without opening it. On iOS, the flagged messages are routed straight to the Spam folder, so they never appear in your primary inbox in the first place.
The detection engine is described by Surfshark as AI-driven, which in practice means it looks at patterns rather than fixed blocklists. The upside of that approach is that new scam campaigns get caught quickly rather than needing to be manually flagged. The company has also confirmed that the feature is now rolling out to all existing Surfshark One and Surfshark One+ subscribers through a routine app update from the Apple App Store or Google Play Store.
Why Text Scams Have Become the Biggest Phishing Channel
The uncomfortable reality is that SMS has quietly taken over as the number one delivery vehicle for phishing. Data cited by Surfshark from Kaspersky research indicates that 35% of all phishing attempts globally now arrive through text messages. That number is not stable either. It has climbed steadily as attackers have realized that consumer SMS filtering is dramatically weaker than corporate email filtering, and that most users pay less attention to who sent them a text than to who sent them an email.
The economics also favor the attackers. Sending a mass text campaign costs almost nothing. The messages themselves get high open rates simply because SMS as a channel still carries an assumption of legitimacy, which is exactly what fake package delivery notifications, fake bank alerts, and fake IRS notices exploit. Once one message succeeds in getting a click, the underlying phishing site handles the rest.
Get Surfshark With Scam Text Protection
How the Filter Actually Works Without Reading Your Messages
The most interesting design decision in Scam Text Protection is the privacy architecture. Message screening is often perceived as inherently invasive, which is a reasonable concern given that texts frequently contain personal, financial, and medical information. Surfshark’s public statements on the feature address this directly: the system does not store the content of your messages, does not continuously monitor your phone, and does not use your messages to train AI models. The detection runs on device pattern-matching, which means the analysis happens locally rather than being pushed to a server.
That is a meaningful difference from some third-party scam-blocking apps that require you to grant broad SMS permissions and route messages through their own cloud infrastructure. It also matters editorially: the entire point of installing a privacy tool is to reduce the number of parties who can see your traffic. A filter that quietly builds a copy of every message you receive undermines the reason you chose a privacy provider in the first place.
The iOS and Android Behavior Difference
The two platforms handle the filtered messages differently because Apple and Google impose different constraints on how apps can interact with the messaging inbox. On iPhone, Surfshark takes advantage of iOS’s native SMS filter extension API, which lets third-party apps categorize incoming messages into the built-in Spam folder. That folder already exists inside the Messages app, but by default it stays empty because most users have no filter routing messages into it. Scam Text Protection changes that.
On Android, the OS gives apps more room to display real-time notifications when a suspicious message arrives, so Surfshark uses that path instead of trying to hide the message entirely. Both approaches accomplish the same thing in practical terms: the scam message stops interrupting your day. It also means that if you occasionally get a legitimate message that looks suspicious to the filter, you can find it and rescue it without hunting through carrier-level junk queues.
Which Surfshark Plan Includes It
Scam Text Protection is included in both the Surfshark One and Surfshark One+ plans, rolling out automatically to existing subscribers of either tier. The Starter plan, which is the entry-level VPN-only option, does not include the feature. If you are already a Surfshark One or One+ subscriber, the feature will land in your app through a normal update: no separate purchase, no repurchase of your plan.
For new users, the practical entry point is the Surfshark One plan, which bundles the core VPN with Alternative ID for disposable email identities, Surfshark Antivirus, Surfshark Alert for data breach monitoring, and now Scam Text Protection as part of the same subscription. Surfshark One+ adds identity theft coverage for US residents and Data removal by Incogni on top of everything in One.
Surfshark One at $2.79 per Month
The Surfshark One plan is currently priced at $2.79 per month on the 24-month commitment, which works out to $75.33 billed once for 27 months of service (24 + 3 free). That represents an 85% discount off the standard rate. The subscription renews annually at the standard rate after the initial 27-month period, with cancellation available at any time from the account dashboard.
The plan covers unlimited simultaneous device connections, which is the differentiator that Surfshark is best known for. There is no cap on how many devices you can connect at once from a single account, so the same subscription covers your phone, laptop, tablet, home router, and every other family member’s devices without additional fees. The apps run on Windows, macOS, Linux, iOS, Android, browser extensions, Fire TV, Apple TV, and via router installation for whole-household coverage.
Get Surfshark One at $2.79/month
30-Day Money-Back Guarantee
Every Surfshark plan is backed by a 30-day money-back guarantee. If the service doesn’t fit the way you use your devices, you can request a full refund within the first month through 24/7 chat support. Funds typically return within 5 to 10 business days depending on the payment method used.
That gives you a full month to install the apps across your setup, wait long enough for the inevitable string of scam texts to arrive, and see whether the filter actually catches them before your inbox does. The $2.79 per month rate applies to the first 27 months of service. Auto-renewal then kicks in at the standard annual rate, and if you would rather cancel or renegotiate before that renewal, set a reminder in your calendar 7 to 10 days before the renewal date.