US Agencies Warn Election Officials of Convincing Phishing and Text Message Scams Ahead of 2026 Midterms

CISA and the FBI have issued a Public Service Announcement warning election and campaign officials about cyber threats linked to the 2026 US midterm elections. The agencies say malicious actors may use phishing (deceptive emails) and smishing (deceptive text messages) to steal login details and other sensitive information, or to install malware on targeted devices.

Election officials, candidates and political organisations are seen as attractive targets because of their access to voter registration data, current government officials and sensitive campaign information. The agencies note that these campaigns are becoming more sophisticated and can closely resemble legitimate communications. They may include convincing emails, text messages, audio and video content designed to push recipients into sharing information or opening malicious links and attachments.

CISA and the FBI urge election officials, campaign staff and the public to read the PSA, follow the recommended cybersecurity practices and stay alert for suspicious emails and mobile messages. Although the warning is aimed at the US election context, the techniques described are the same ones used against businesses everywhere.