The invention provides a detection method for mobile phone worms which have the characteristic of being disseminated through a URL (Uniform Resource Locator)-contained short message. The detection method comprises the following steps of: extracting related information of the URL-contained message of a mobile phone; putting the related information in a queue for analyzing; and if an addresser sends the short message to a plurality of users and the short message is automatically forwarded, marking that a corresponding URL link comprises suspicious worm samples. The detection method is operated on a short message gateway and can effectively prevent the dissemination of the worms by URL-contained messages.