How to Spot a Scam Text Message (With Real-World Examples)
Fake delivery notices, bank alerts, toll bills and "wrong number" chats. Learn the tells that give scam texts away, with annotated examples and what to do next.
Scam text messages usually arrive unexpected, create urgency, impersonate a trusted brand such as USPS, a bank or a toll agency, and push you to tap a link, reply or call a number. Don't click or reply. Check the claim through the company's official app or website, then forward the text to 7726 and report it at ReportFraud.ftc.gov.
Photo: Unsplash
On this page
A text says your package is stuck, your bank card is locked or you owe a toll. It looks official, it is urgent, and it has a link. This is exactly how text scams, also called smishing, work.
They are also costly. The Federal Trade Commission reported that people lost about $470 million to text scams in 2024, more than 5 times the 2020 figure, and it notes most fraud is never reported. The good news: scam texts follow a small set of scripts with tells you can learn to spot in seconds. This guide walks through annotated examples of the most common ones and exactly what to do when one lands on your phone.
The 6 tells that give most scam texts away
Almost every scam text uses some mix of these signals. If you spot 2 or more, treat the message as a scam.
- You were not expecting it. An unknown sender, or a message about an order, account or bill you do not recognize.
- It creates urgency or fear. “Final notice,” “account suspended,” “pay within 24 hours” or threats of fines and legal action.
- It impersonates a trusted name. USPS, UPS, Amazon, your bank, a toll agency, the IRS or a streaming service.
- It wants you to act inside the message. Tap a link, reply YES or NO, or call a number provided in the text.
- It asks for money or personal details. Card numbers, bank logins, Social Security numbers or a small “fee.” The FTC is clear that legitimate companies will not ask for your account information by text.
- The link looks off. Misspelled brand names, extra words or hyphens, unusual endings, or a shortened link that hides the real address.
Key takeaway: The safest rule is simple. Never use the link or phone number inside an unexpected text. Go to the company’s official app or a website you type in yourself.
Annotated examples of common scam texts
The FTC’s 2024 data found that 5 scripts made up about half of all text scams reported to it. The examples below are illustrative, written to show the typical wording, not copies of specific messages.
1. The fake package delivery problem
“USPS: Your package is on hold due to an incomplete address. Update your details within 12 hours to avoid return: [link]”
What gives it away:
- Unexpected and vague. No tracking number you recognize and no sender name.
- Short deadline to rush you.
- A link to “update” details, which leads to a fake site that looks like USPS and asks for a small redelivery fee.
This was the most reported text scam in the FTC’s 2024 data. The real goal is your card number and sometimes your Social Security number. Check deliveries only by typing the carrier’s website yourself or using the retailer’s app.
2. The fake fraud alert
“Bank Alert: Did you authorize a $1,249.00 purchase at an electronics store? Reply YES or NO.”
What gives it away:
- Fear plus a big number to make you react fast.
- A request to reply. Replying confirms your number is active and often triggers a call from a fake “fraud department.”
- Escalation. The FTC describes how the caller then claims your money is at risk and pressures you to move it to a “safe” account that the scammer controls.
No real bank will ever ask you to move money to protect it. Call the number on the back of your card instead.
3. The unpaid toll notice
“Notice: You have an outstanding toll balance of $6.99. Pay now to avoid a $50 late fee: [link]”
What gives it away:
- A small amount that feels easy to pay.
- A threatened penalty for delay.
- A payment link to a site that mimics a real toll agency.
The FTC notes these texts have impersonated toll programs across the country. We break this one down fully in our guide to the unpaid toll text scam.
4. The job offer that pays to “rate” things
“Hi! We saw your resume. Earn $200 to $500 a day working from home, flexible hours. Interested?”
What gives it away:
- You never applied. And no company name or job details.
- Pay that sounds too good for vague work.
- A later twist. The FTC describes “task scams,” where victims rate products or apps, then are told to deposit money to unlock earnings they never receive.
5. The “wrong number” chat
“Hi Linda, are we still on for coffee Saturday?”
What gives it away:
- A friendly mistake that invites you to reply.
- A slow build. The sender keeps chatting, often turning flirty or friendly over days or weeks.
- The pitch. Eventually they mention crypto or an investing platform. The FTC reports victims of this script often lose large sums.
The safest response to a “wrong number” text from a stranger is no response.
6. The account or prize bait
“Your Netflix account is suspended. Verify your payment information: [link]” or “Congrats! You’ve won a $500 gift card. Claim here: [link]”
The FTC lists prizes, gift cards, coupons, payment problems and fake invoices among the classic hooks. If you think your account might really have a problem, open the app directly.
Scam texts vs legitimate texts
Real companies do send texts, so here is how to tell them apart.
| Signal | Legitimate text | Scam text |
|---|---|---|
| Did you expect it? | Follows something you did, like an order or sign-in | Arrives out of the blue |
| What it asks | Usually informs, or asks you to open the official app | Asks for card numbers, logins or Social Security numbers |
| Links | Points to the company’s real domain, often one you recognize | Misspelled, padded with extra words or shortened |
| Tone | Calm and specific, with order or tracking details you can check | Urgent, threatening or too good to be true |
| Payment requests | Rare, and through the company’s own app or site | Pay now by link, gift card, crypto or payment app |
| One-time codes | Says “Do not share this code” | Someone asks you to read or forward a code |
That last row matters. A real verification code text is something you requested. If anyone calls or texts asking you to share it, they are trying to break into your account. Strong two-factor authentication helps, but only if you never hand the code over.
What to do when you get a scam text
- Do not tap the link, reply or call the number. That includes replying “STOP.” The FCC advises not responding to suspicious texts at all.
- Verify independently. If you think the message might be real, contact the company using its official app or a phone number or website you already know.
- Report it to your carrier. Forward the text to 7726 (which spells SPAM) so your wireless provider can spot and block similar messages.
- Report it in your messaging app. Use the “Report Junk” option on iPhone or “Report spam” in Google Messages.
- Report it to the FTC at ReportFraud.ftc.gov. Reports help investigators spot trends.
- Delete the message after reporting, and block the sender.
What to do if you already tapped or replied
Tapping a link by itself does not always cause harm, but act quickly:
- If you entered a password, change it right away on the real site, and change it anywhere else you reused it.
- If you entered card details, call your card issuer using the number on the back of the card and ask for a new card.
- If you shared your Social Security number, visit IdentityTheft.gov for a recovery plan and consider a credit freeze.
- If you sent money, contact the payment company or bank immediately.
For a full, prioritized checklist by payment method, see what to do if you got scammed.
How to get fewer scam texts
You cannot stop every scam text, but you can cut the volume:
- Turn on filtering. iPhone can filter messages from unknown senders into a separate list, and Android’s Google Messages includes spam protection.
- Check your carrier’s tools. Many wireless providers offer free text and call blocking, and some apps block both.
- Rely on network blocking. The FCC adopted its first rules targeting scam texts in 2023, requiring mobile carriers to block texts that appear to come from invalid, unallocated or unused numbers.
- Share your number less. Skip optional phone fields on forms and loyalty programs, and see our steps to remove your info from people-search sites.
Where to start: a 10-minute setup
- Turn on unknown-sender filtering in your messaging app.
- Save your bank’s and card issuers’ real phone numbers in your contacts.
- Add your delivery carriers’ and toll agency’s official apps or bookmarks.
- Share this guide’s 6 tells with older relatives, who are frequent targets.
- Agree as a family to never act on a payment request by text without checking first. A family safe word also helps against AI voice cloning scams.
Conclusion
Scam texts work because they look ordinary and arrive at busy moments. Slow down, look for the tells, and never use the link or number inside an unexpected message. Verify through official channels, forward the text to 7726, report it to the FTC and move on with your day.
Sources
- FTC Data Spotlight: Top text scams of 2024 — $470 million in reported 2024 losses and the 5 most reported scripts
- FTC Consumer Advice: How to recognize and report spam text messages — warning signs, forwarding to 7726 and reporting
- FCC: FCC adopts its first rules focused on scam texting — carrier blocking of texts from invalid and unused numbers
- FCC Fact Sheet: Combatting illegal text messages — follow-up blocking rules adopted in December 2023
Frequently asked questions
How can you tell if a text message is a scam?
A text is likely a scam if it is unexpected, urgent and asks you to tap a link, reply, call a number or pay. Watch for impersonated brands like USPS, banks or toll agencies, requests for card or Social Security numbers and odd-looking links. Legitimate companies do not ask for account details by text. When in doubt, check through the company's official app instead.
What happens if I click on a scam text link?
Clicking alone may not harm you, but the page may try to steal what you type or install unwanted software. Close the page, and do not enter anything. If you entered a password, change it on the real site. If you entered card details, call your card issuer for a new card. Keep your phone's software updated and watch your accounts for unusual activity.
Should I reply STOP to a spam text?
No. Replying STOP to a scam text confirms your number is active and can lead to more messages. The FCC advises not responding to suspicious texts at all. Instead, forward the message to 7726, use your messaging app's report junk or report spam option, report it at ReportFraud.ftc.gov and then delete it. Only reply STOP to marketing texts from companies you knowingly signed up with.
Where do I report scam text messages?
Forward the text to 7726, which spells SPAM, so your mobile carrier can block similar messages. Then report it in your messaging app and file a report with the Federal Trade Commission at ReportFraud.ftc.gov. If you lost money or shared personal details, also contact your bank or card issuer and visit IdentityTheft.gov for a recovery plan.
Why am I suddenly getting so many scam texts?
Scammers use automated tools to send texts to huge lists of numbers, many of them guessed or bought from data brokers and past data breaches. A spike often means your number landed on a new list. Turn on unknown-sender filtering, use your carrier's blocking tools, report every scam text to 7726 and limit where you share your number.
Do banks send text messages about fraud?
Yes, many banks send fraud alerts by text, but real alerts do not ask for your full card number, PIN, password or one-time code, and they never ask you to move money to a "safe" account. If you get an alert, ignore any number in the text and call the number on the back of your card or open your bank's official app to check.
Can you get hacked by just opening a text message?
For most people, simply opening a text is very unlikely to cause harm. The danger comes from tapping links, downloading attachments, replying or calling numbers in the message. Keep your phone's operating system updated, since updates fix security flaws, and avoid interacting with unexpected messages. If you did tap something, follow the recovery steps above.
Was this guide useful
No reviews yet. Share your experience and help other readers.