The Toronto Police have made significant strides in combating cybercrime by arresting three individuals linked to an SMS blaster operation, marking a notable first for Canada. The arrests follow an investigation revealing that the operation, which began in November 2025, sent a staggering number of unsolicited text messages to tens of thousands of devices across the city.
According to a report from the Toronto Police Service, these SMS blasters work by spoofing cell towers, emitting a stronger signal to deceive nearby mobile phones and tablets into connecting with them. Once connected, the devices can disseminate thousands of messages, often containing links to phishing sites that mimic legitimate business login pages. This method exploits vulnerabilities in older 2G cellular networks, raising concerns about user security.
Detective Sergeant Lindsay Riddell stated that the primary goal of the operation was to compromise individuals' usernames and passwords, including sensitive banking information. In addition to the potential financial harm, these devices also disrupt cellular communications, posing risks to emergency services like 911.
The police have described the SMS blaster used in Toronto as "uniquely built" and capable of being operated from the back of a vehicle, allowing for mobility across various locations. While authorities have shared images of similar devices from previous investigations in other countries, they have opted not to release specific images from the Toronto case for safety reasons.
This incident is reminiscent of a similar operation in Bangkok, Thailand, where police apprehended gang members who sent nearly one million phishing messages over a short period. Such operations highlight the growing challenge of cybersecurity and the need for enhanced protective measures.
To safeguard against SMS blasters, users are encouraged to disable their devices' 2G connectivity. Apple device users can further enhance their security by activating Lockdown Mode, effectively disabling their 2G radios.
As technology continues to evolve, the implications of such cyber threats underscore the necessity for ongoing vigilance and innovation in cybersecurity measures. The proactive steps taken by law enforcement not only protect individuals but also pave the way for a more secure digital future.