Scam text messages can look surprisingly ordinary. They may claim to come from your bank, a delivery company, a toll agency, a retailer, a government office, or even someone who appears to know you. Their goal is usually to make you click a link, call a number, send money, or reveal information before you stop to question the message.
You do not need to memorize every type of text-message scam. A few simple habits can help you recognize suspicious messages and verify them safely.
What does a scam text usually look like?
Most scam texts use some combination of surprise, urgency, fear, curiosity, or the promise of a reward. The details change, but the pressure to act quickly is often the same.
1. Ask whether you were expecting the message
Start with the situation rather than the sender's name. Were you expecting a package? Did you recently use the bank or service mentioned? Do you actually have an account with that company?
An unexpected message is not automatically fraudulent, but it deserves verification before you follow its instructions.
2. Watch for urgency and emotional pressure
Messages such as “your account will be suspended,” “your package cannot be delivered,” or “you owe an unpaid toll” are designed to make you react quickly. Slow down whenever a text makes the consequences sound immediate.
3. Treat unexpected links cautiously
A link may lead to a fake sign-in or payment page that closely resembles a legitimate website. Instead of tapping the link, open the company's official app or type its known website address yourself.
4. Never send passwords or verification codes
Do not provide passwords, PINs, Social Security numbers, card details, or one-time security codes because someone requested them in an unexpected text. A verification code can sometimes be exactly what a criminal needs to enter an account.
5. Watch for unusual payment requests
Be especially cautious when someone unexpectedly requests gift cards, cryptocurrency, wire transfers, or payment through an unfamiliar method. These forms of payment can be difficult to reverse.
6. Do not trust the displayed sender alone
A familiar company name, short code, or local-looking phone number does not prove that a message is legitimate. Judge the request itself and verify important claims independently.
7. Be careful with wrong-number and relationship-building texts
Some scams start with an innocent-looking greeting or wrong-number message. The sender may continue the conversation, build trust over days or weeks, and eventually introduce an investment, emergency, or money request.
Your 30-second scam text check
- Expectation: Was I expecting this message?
- Pressure: Is it trying to scare, rush, or excite me?
- Link: Does it want me to use an unexpected link?
- Information: Is it asking for a password, payment information, or security code?
- Verification: Can I confirm the claim through an official app, website, or phone number I find myself?
What should you do with a suspicious text?
Do not click its link, call the number it provides, or reply with personal information. Open the organization's official app or website yourself. If necessary, contact the organization using a phone number from a statement, card, official website, or other source you already trust.
Use your phone's spam or junk reporting feature when appropriate, then delete the message.
What if you already clicked the link?
Clicking a link does not automatically mean your phone or accounts have been compromised. Stop interacting with the page and do not download anything it requests. If you entered a password, change that password through the legitimate service and change it anywhere else you reused it. Turn on two-factor authentication if available.
If you entered payment information, contact your bank or card provider using trusted contact information and review recent transactions.
What if you already replied?
A simple reply does not automatically give a scammer control of your phone. However, it can confirm that your number is active. Stop the conversation, block the sender when appropriate, and be alert for additional scam attempts.
What not to do
- Do not click a suspicious link just to see where it goes.
- Do not send a one-time security code to someone who contacted you unexpectedly.
- Do not let an urgent deadline stop you from verifying the claim.
- Do not continue arguing with a suspected scammer.
- Do not assume a familiar logo or company name proves authenticity.
How do you know you are safer?
You are using the right approach when unexpected messages no longer determine how you contact an organization. Instead, you independently open the official app, visit a known website, or use a trusted phone number.
The Know Phishing takeaway
Pause before you respond. Question unexpected messages, avoid unfamiliar links, never share security codes, and verify important requests through a method you choose yourself.