Text ScamsUpdated April 2026

How to Tell if a Text
Message is a Scam

Americans lost $470 million to text scams in 2024 — five times more than in 2019. Here is a complete guide to spotting every type of scam text.

Your phone buzzes. A text claims your parcel could not be delivered. Or your bank account has been locked. Or you have won something. These messages are engineered to look completely legitimate — that is precisely the point.

Text message scams — also called smishing (SMS phishing) — are now the most common way scammers make first contact with victims. Texts feel personal, get opened fast, and are harder to filter than email. Here is how to identify every type.

$470M
Lost to text message scams in the US in 2024 — five times higher than in 2019
Source: FTC Data Spotlight, 2025

7 Signs a Text Message is a Scam

🚩 Check your text against these patterns
1
It contains a link you did not ask forLegitimate banks, delivery companies, and government agencies do not send unsolicited links asking you to log in or verify information. If a text contains a link and you did not initiate the contact, do not tap it. Go directly to the company's official app or website instead.
2
It creates urgency or threatens consequences"Your account will be closed in 24 hours." "Your parcel will be returned unless you pay £1.99." These phrases are designed to panic you into acting before you think. Real companies give you adequate time and do not threaten via text.
3
The sender number looks unusualAn unfamiliar 10-digit number, a number that looks like a mobile but claims to be your bank, or a random string of digits are all red flags. Many scammers now spoof legitimate short codes — always verify through official channels.
4
It asks for personal or financial informationNo bank, government agency, or legitimate business will ask for your password, PIN, full card number, or Social Security number via text message. This is an absolute rule with no exceptions whatsoever.
5
It offers something too good to be true"You have been selected for a £500 gift card." "Congratulations, you won our monthly prize draw." You cannot win a contest you never entered. The prize is bait to get you to click or share information.
6
It contains spelling or grammar errorsYour bank's actual communications are professionally proofread. Unusual capitalisation, awkward phrasing, or obvious spelling errors are common in scam texts because many are mass-generated by automated tools.
7
The URL does not match the real company domainInspect any link carefully. "amaz0n.com", "royal-mail-delivery.net", or "fedex-tracking-2026.com" are not real company domains. Legitimate companies use their primary domain and nothing else.

The Most Common Scam Text Types

Fake delivery notifications are currently the most widespread scam text. You receive a message claiming your parcel is held, requiring a small customs or redelivery fee. The link leads to a fake payment page that steals your card details.

Bank fraud warnings claim unusual activity has been detected and ask you to verify your identity via a link. Once you enter your credentials on the fake page, your account is drained.

Government impersonation texts claim to be from the IRS, HMRC, Social Security Administration, or immigration authorities, threatening fines or arrest. Government agencies do not initiate contact by text for sensitive matters.

Wrong number scams start with a friendly text that appears to be meant for someone else. When you reply to correct them, the scammer builds a relationship over weeks before eventually asking for money or promoting a fraudulent investment.

🚨
Already clicked a link or entered details?

Change your passwords immediately on any accounts sharing those credentials. Contact your bank if payment details were entered. Run a malware scan on your device. Report the number by forwarding the text to 7726 (SPAM) — this works in both the US and UK.

What to Do With a Suspicious Text

  1. Do not click any link. Do not reply to the number.
  2. Contact the company directly using a number from their official website — not from the text.
  3. Forward the text to 7726 (spells SPAM) to report it to your mobile carrier.
  4. Report it to the FTC at reportfraud.ftc.gov.
  5. Delete the message after reporting it.

For more information, see the FTC's guide on spam text messages and CISA's phishing guidance.

Got a suspicious message right now?

Paste it into our free AI scam checker. Get an instant verdict with specific red flags identified and action steps.

Analyze this message free →

More guides