Mobile invitations come as links too. How do I tell?

Genuine mobile wedding invitations and funeral notices open as web pages. If viewing one requires installing an app, or Android asks you to allow unknown sources, it is almost certainly smishing. Also check whether the final address is a known invitation service or a freshly registered domain.

It came from someone I know. Can it still be a scam?

Yes. An infected phone sends the same text to everyone in its contacts, so these often arrive from real friends' numbers. Do not reply — call the person directly.

Ignoring a funeral notice feels wrong.

Checking takes a minute: call the sender or a mutual friend. A real notice can be confirmed in words — the venue and the dates. You can pay respects without opening the link.

Wedding & Obituary Text Scams (Smishing)

Problem

“[Obituary] We regret to inform you of the passing of ○○○‘s father. Funeral details:” — or — “We are getting married! Here is our mobile invitation.” A familiar name, often a familiar number.

Life-event smishing exploits manners. Ignoring a death notice feels rude and opening an invitation feels natural. And because an infected phone texts everyone in its contacts, these often come from a real friend’s number.

Symptoms

A funeral, wedding or first-birthday notice with a link.
Vague names (”○○○”, “a friend”).
The page says you must install an app to view the invitation or notice.
Android asks “allow installs from unknown sources?”
Other friends received the same text.

Three checks

1. Does it ask you to install an app? The clearest rule. Real mobile invitations and funeral notices open as web pages. If you need to install an app (APK) to view it, it is smishing. Installed apps read your texts and contacts and spread the same message from your phone.

2. The link’s final address. A recently registered domain, or a short link that expands to an .apk file, means danger.

3. Ask the sender directly. Do not reply to the text — call. If it is real, you will know at once; if it is fake, you can tell them their phone is infected.

Diagnose with DechoNet

Paste the message into the phishing link check. It shows whether the link leads to an app (APK) download, how old the domain is and whether it appears in phishing feeds.
Domain registration lookup shows the link domain’s registration date.
Lookalike domain detection finds addresses imitating known invitation services.

Resolution Checklist

If it asks for an app install, close it.
Call the sender or a mutual friend to confirm.
Check the link’s final address with the link checker.
Keep Android’s “install unknown apps” switched off.
If it came from a friend’s number, tell them their phone may be infected.
Screenshot the text, report it (Korea: 118) and delete it.

When to Escalate

If you already installed the app, follow the “you installed an app” steps in what to do after clicking a smishing link.
If the same text went out from your phone, warn your contacts not to tap it.

Paste the message and check it now

Paste the whole message or just the link. The text is not stored; each link is followed to where it really goes.