How can I check if a text message is a scam?
Common signs of a scam text
Scam texts (often called smishing) usually come from unknown numbers or short codes that don't match the company they claim to be. They create urgency—'Your account will be locked,' 'Package held,' 'Unusual login'—to make you act without thinking. They often include a link that looks almost right but has a slight misspelling or a different domain (like amaz0n.com instead of amazon.com).
Legitimate companies rarely ask for sensitive information like passwords, PINs, or full Social Security numbers via text. If a message asks you to 'verify' your account by clicking a link or calling a number, treat it as suspicious. Also watch for poor grammar, generic greetings ('Dear customer'), and offers that seem too good to be true.
- Unknown sender or mismatched number
- Urgent or threatening language
- Link to a misspelled or odd domain
- Request for personal or financial info
- Generic greeting instead of your name
- Offers of free gifts or unexpected refunds
How to verify safely
Don't click any link or call any number in the message. Instead, look up the company's official customer service number from a bill, statement, or their website (type the address manually). Call them and ask if they sent the text. You can also forward the suspicious text to 7726 (SPAM) in the U.S. to report it to your carrier.
If the message claims to be from a delivery service like UPS, FedEx, or USPS, go to the official website and enter your tracking number there. Never use the link in the text. For bank alerts, log in to your account through the bank's app or website to check for any real notifications.
What to do if you already replied or clicked
If you clicked a link and entered information, change your passwords immediately and contact your bank if financial details were shared. If you only replied with 'STOP' or 'NO,' you may have confirmed your number is active, leading to more spam. Block the number and report it as spam through your phone's messaging app.
Remember that scammers can spoof phone numbers to make them look like they come from a legitimate business or even a local area code. So caller ID or sender name alone isn't proof of legitimacy.
Common mistakes
- Trusting the sender name because it looks like a real company—scammers can spoof names and numbers.
- Clicking links to 'unsubscribe' or 'opt out'—this often confirms your number to scammers.
- Calling the number provided in the text instead of looking up the company's official contact info.
