People imperiled through sign-in links sent by SMS