Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SMS Donations Advertised via Twitter - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
SMS Donations Advertised via Twitter

We all like the convenience and speed of SMS messaging. As a result, a number of companies set up services to allow donations to be send via SMS message. The approach is pretty simple. You text a message identifying your cause (e.g. "HAITI") to a special short code configured by the recipient. A "short code" is a 5 or 6 digit number configured to receive your message pretty much like a regular phone number.

These short codes are frequently advertised via twitter in messages like "SMS x to yyyyyy to donate to cause z". One thing that doesn't fit into the twitter message is that the cost of the donation will be billed to your phone bill. Typically $5 or $10. Legitimate providers of this service appear to limit you to one donation per day.

However, there is no easy way for you to identify who you send the money too. I would suggest to be very careful with this form of donation and only to use the number if you receive it from the organization directly. Please avoid sending money "blindly" just because a friend "RT" it.

Two legitimate operators of this service appear to be:

Here are some of the messages we saw on twitter in connection with the Haiti earthquake:

Text "Yele" to ***** to donate $5 4 HAITI
Text "HAITI" to "*****" & ur donation of $10 will go 2 the Red Cross 2 help w/relief efforts in #Haiti

 (I replaced the SMS number with stars)



Johannes B. Ullrich, Ph.D.
SANS Technology Institute

I will be teaching next: Application Security: Securing Web Apps, APIs, and Microservices - SANS London June 2022


4478 Posts
ISC Handler
Jan 13th 2010
One thing of note about 501501 is that it is a pay service. I believe that a portion of that money goes to the company that runs If you look at @wyclef's page, you can donated directly to the fund via and (it claims) 100% of your funds go directly to Haitian relief.

7 Posts
The RedCross is actively soliciting donations via SMS text messages.

"The Red Cross is also receiving money through a third party mobile fundraising effort sponsored by Mobile Accord. Mobile donors can text “Haiti” to 90999 to send a ten dollar donation to the Red Cross. The funds will go to support the Red Cross relief efforts in Haiti."
Very disappointing, but apparently Wycleff Jean's paid 130k for performing for his own benefit show. Smoking gun has more, very depressing stuff.

17 Posts

Sign Up for Free or Log In to start participating in the conversation!