Yes, it's phishing. It's common enough that it's got its own name: smishing.