A tool, not a hack
Bombing relies on widely available services or scripts, sometimes free, that automate the mass sending of texts or the triggering of calls to a target number. Unlike other attacks in this dossier, the goal usually isn't to steal information: it's to overwhelm — draining the battery, keeping the phone buzzing nonstop, and burying important communications under the noise.
Two distinct uses
Direct harassment
A person deliberately targets a number to disrupt, intimidate, or wear down their victim — behavior that qualifies as cyberstalking or harassment in many jurisdictions.
Technical diversion
A flood of notifications is used to bury a legitimate alert in the noise, or precedes a conveniently timed "support" call promising to make the attack stop in exchange for access.
Facing a number that's harassing you, Egidio lets you cut off its calls entirely in one move — no need to uninstall a third-party app or change your number.
Why it's hard to stop on your own
Blocking one contact is rarely enough: bombing tools often run several numbers or senders in parallel, which makes manual, number-by-number blocking ineffective against a continuous flood. Detection needs to focus on the pattern — an abnormal volume in a short time — rather than on a single number at a time.
Is it illegal?
In many jurisdictions, targeted, repeated bombing falls under digital harassment or stalking laws and can be reported to law enforcement, regardless of the technical tool used to trigger it. Keep screenshots showing the scale and frequency of the messages or calls — they're useful evidence if you file a report.
Frequently asked questions
What is SMS or call bombing?
It's the automated sending of a very large number of texts or calls to a single number in a short time, using a tool or online service, for the purpose of harassment, diversion, or overload.
Is bombing illegal?
In many jurisdictions, this kind of behavior falls under harassment or stalking laws and can be reported to law enforcement, regardless of the technical tool used to trigger it.
Why do some attacks use bombing alongside a scam?
A flood of notifications can be used to bury a legitimate alert (for example a real bank notification) in the noise, or to push the victim to answer a conveniently timed "support" call promising to make the harassment stop.
Related dossiers
Egidio — The Threat Laboratory, "SMS & call bombing: when a number overwhelms you", egidio.app/en/laboratoire/sms-call-bombing/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.