SIM Farm (Smishing Kit)
A bank of SIM cards and mobile devices used to send mass fraudulent SMS messages at scale before numbers are blocked by carriers.
Also known as: SIM box, SMS blaster, smishing farm, SIM array
Last reviewed: 1 June 2026
A SIM farm is a physical array of dozens or hundreds of low-cost mobile phones or SIM-card readers, each loaded with a different SIM. Fraudsters use automation software to send thousands of smishing messages simultaneously across all devices. Because each message originates from a real mobile number, carrier-based spam filters are initially less likely to catch them than messages sent from VoIP services.
When a number is blocked or reported, the operators simply rotate to fresh SIMs — which are cheap and easily obtained in bulk in many jurisdictions with lax identity-verification requirements. Some farms also support two-way communication, allowing scammers to respond to victims personally once initial engagement is established.
Regulators in various countries have moved to tighten SIM-registration laws and require network operators to report or block SIM farms. Businesses can protect customers by implementing sender-ID registration schemes, which restrict which numbers can send messages on their behalf.
Examples
- A warehouse containing 500 cheap Android phones, each with a different SIM card, sends 400,000 fake parcel-delivery texts overnight.
- Investigators seize a SIM farm used to send fraudulent bank-alert texts, finding 300 SIMs sourced from multiple networks.