F-Secure SMS Scam Protection: how AI blocks smishing on your phone

Scam texts — "smishing" — work because they arrive in the same inbox as your bank, your delivery courier, and your doctor. One fake "your parcel is held, pay the fee here" message among the real ones is all it takes. F-Secure's answer is SMS Scam Protection: an AI layer that reads incoming texts as they arrive and moves the dangerous ones out of your way before you can tap the link.

This guide is about F-Secure's specific implementation — how to switch it on, what it does automatically, and where its limits are. If you also want to train your own eye, our guide on how to spot smishing yourself covers the tell-tale signs no filter can fully replace.

What SMS Scam Protection actually does

Once enabled, F-Secure analyzes the content of incoming text messages with AI and looks for the patterns of a scam: fake delivery notices, bank "security alerts," prize claims, and links that lead to phishing pages. When a message looks harmful, F-Secure flags it and routes it into a junk / filtered folder instead of your main conversation list. You still have the message if you need it — it is separated, not deleted — but it no longer sits in your face demanding a tap.

Two things are worth understanding for beginners:

• It reads content, not just sender. Basic blockers only stop known bad numbers. Scammers rotate numbers constantly, so F-Secure judges the message itself, which is why it can catch a first-time scam from a number you have never seen.
• The AI is F-Secure's own. The system is designed to keep only non-personal information — essentially the verdict (scam or not) and the reasoning — to improve detection. F-Secure is a Finnish company operating under EU/GDPR rules and states it does not sell your data, which is a reasonable posture for a tool that necessarily sees your texts.

How to turn it on — iOS vs Android

This is the part that trips people up, because the two platforms hand F-Secure very different levels of access.

On iOS, Apple does not let any app silently intercept your Messages. Instead, F-Secure plugs in as an official SMS filter extension, and you have to authorize it in the system settings. The path is roughly:

1. Install and set up the F-Secure app and its Scam Protection feature.
2. Open Settings > Apps > Messages > Message Filtering > Unknown & Spam.
3. Enable filtering and select F-Secure as the filtering app.

After that, texts from numbers not in your contacts get routed through F-Secure, and flagged scams land under the "Junk" / filtered tab in Messages rather than your main list. Because iOS only filters messages from unknown senders, texts from people already in your contacts are not scanned.

On Android, F-Secure can be granted broader permission to work as a messaging/SMS handler, so filtering is more thorough and the setup is driven inside the F-Secure app itself rather than buried in system settings. The trade-off is that you grant the app more access; on iOS you get tighter sandboxing but narrower coverage. Neither approach is "wrong" — it reflects how each operating system is built. In independent testing, the mobile SMS filtering flagged malicious texts before the reviewer could interact with them, so on both platforms the core promise holds up.

The Scam Scanner companion (beta)

SMS filtering only sees text messages. But scams also arrive as WhatsApp messages, emails, marketplace listings, and dodgy websites. For those, F-Secure has added Scam Scanner, a separate beta feature that works from a screenshot.

The idea is deliberately beginner-proof: when something feels off — a message, an offer, a login page — you take a screenshot, feed it to Scam Scanner, and the AI gives you a verdict on whether it looks like a scam and why. It fills the gap that automatic SMS filtering can't reach, because you choose what to check.

Two caveats to set expectations correctly:

• It is still beta. Treat its verdict as a strong second opinion, not gospel.
• It is English only for now. If your suspicious message is in another language, Scam Scanner is not yet the tool for it. It runs on current devices (iOS 18 and newer, Android 11 and newer).

What it catches — and what it can't

Being honest about limits matters more than hype here.

It handles well:

• Bulk smishing from unknown numbers — the everyday parcel, bank, and prize scams.
• First-contact scams, because it judges message content rather than relying on a blocklist.
• The wider web angle when paired with F-Secure's browsing protection, which blocks the phishing sites those texts point to (independent testing blocked 19 of 20 phishing pages).

It will not save you from:

• Scams you act on willingly. F-Secure is explicit that no tool guarantees 100% safety — if you are convinced to transfer money to a "safe account," no filter stops you from sending it.
• Texts from known contacts on iOS, since those bypass filtering by design.
• The occasional miss. AI filtering is very good, not perfect, so an unusual scam can slip through.

That is exactly why the human layer still matters. SMS Scam Protection removes the flood of obvious junk so your attention is free for the rare message that gets through — and for those, it helps to know how to check if a text or link is a scam yourself before you act.

The bottom line

F-Secure SMS Scam Protection is a genuinely useful, low-effort layer: turn it on once, and AI quietly filters the smishing tide out of your inbox. iOS gives you tighter privacy but only screens unknown senders; Android screens more broadly with more access. Add the Scam Scanner beta for the messages that don't arrive as SMS, keep your own skepticism switched on, and you have covered the most common way ordinary people get scammed on their phones. It ships as part of F-Secure Total alongside antivirus, VPN, and identity protection.

▶ Try F-Secure Total