.png)
A text message arrives saying your bank account has been locked. Another claims that a package cannot be delivered until you pay a small fee. You may even receive a friendly message that appears to have been sent to the wrong person.
These messages can seem harmless or urgent, but they may be text message scams designed to steal your money, passwords, or personal information.
Text message phishing is sometimes called “smishing,” a combination of “SMS,” which is another name for text messaging, and “phishing.” In a smishing attack, a scammer sends a deceptive message hoping you will click a link, call a phone number, send money, or reveal private information.
The safest response is usually simple: pause, do not interact with the message, and verify the situation another way.
Why Text Message Scams Can Be Convincing
Most people read text messages quickly. Scammers take advantage of this by creating a sense of urgency, fear, excitement, or curiosity.
A fraudulent message may tell you:
- A suspicious purchase was made from your account.
- Your package is being held.
- You owe an unpaid toll, tax, or bill.
- Your reward points are about to expire.
- You have been approved for a loan you never requested.
- You won a prize or gift card.
- A family member needs money immediately.
- Someone has contacted the “wrong number” and wants to continue chatting.
Current consumer alerts show that scammers continue to use fake fraud warnings, loan offers, reward-point notices, and other unexpected messages to persuade people to respond.
The message may include a company name or logo, but that does not prove it is genuine. Scammers can also disguise the sender information so that a message appears to come from a familiar business, government agency, or local phone number.
Common Warning Signs
A suspicious text message often includes one or more of the following signs.
It Arrives Unexpectedly
Be cautious when a message concerns an account, order, loan, prize, or delivery you were not expecting.
Even when the message mentions a company you use, do not assume it is genuine.
It Pressures You to Act Immediately
Scammers may say your account will be closed, your payment is overdue, or your opportunity will disappear unless you act now.
Urgency is meant to prevent you from stopping to think.
It Asks You to Click a Link
The link may lead to a fake website that looks like a bank, delivery company, retailer, or government agency. The page may ask for your password, credit card number, Social Security number, or other sensitive information.
Some links can also lead to harmful software or other security risks.
It Requests Personal or Financial Information
Legitimate organizations generally do not send unexpected texts asking for complete passwords, bank account numbers, Social Security numbers, or security codes.
Never provide this information simply because a text requests it. The Federal Trade Commission advises consumers not to share personal or financial details in response to an unexpected request.
It Asks for Unusual Payment
Be suspicious of anyone who requests payment through gift cards, cryptocurrency, wire transfers, cash deposits, or payment applications, especially when the message involves a threat or emergency.
The Message Contains an Unfamiliar Link
A website address may look almost correct but include an extra word, misspelling, unusual ending, or random group of letters.
On a phone screen, these differences can be easy to miss.
It Encourages You to Reply
Some scammers want you to reply even if you are only saying “stop,” “no,” or “wrong number.” A response may confirm that your phone number is active and that someone is reading the messages.
Do not reply to an unexpected message unless you have independently confirmed who sent it.
What to Do When You Receive a Suspicious Text
1. Do Not Click the Link
Avoid opening links or attachments in an unexpected message.
A message does not become trustworthy simply because it mentions your name, your bank, a recent purchase, or a company you recognize.
2. Do Not Call the Number in the Message
A phone number included in a scam text may connect you directly to the scammer.
Instead, find the organization’s official number on the back of your bank card, a billing statement, an official mobile application, or the organization’s verified website.
3. Check the Claim Independently
Open the company’s official app or type its known website address into your browser yourself.
For example, when a message claims there is a problem with your bank account, sign in through your normal banking app rather than using the text message link.
4. Ask Someone You Trust
When a message feels confusing or frightening, show it to a trusted family member, friend, caregiver, or bank representative before taking action.
A second opinion can help you notice warning signs that are difficult to see when you feel rushed.
5. Block and Report the Sender
Most phones allow you to block a number and mark a message as junk or spam.
The FTC also recommends forwarding suspicious text messages to 7726, which spells “SPAM” on a telephone keypad. This helps your mobile carrier investigate unwanted messages. You can also report fraud to the FTC through its official reporting service.
Unwanted robotexts may also be reported to the Federal Communications Commission.
6. Delete the Message
After reporting and blocking the sender, delete the text so that you do not accidentally open it later.
What to Do If You Already Clicked
Clicking a link does not always mean that your information has been stolen. However, you should take prompt precautions.
If you opened the link but did not enter any information:
- Close the webpage.
- Do not download or install anything.
- Update your phone and security software.
- Watch your accounts for unusual activity.
If you entered a password:
- Change the password immediately by visiting the real website or app.
- Change it anywhere else you used the same password.
- Turn on multifactor authentication when available.
Multifactor authentication is an extra security step that may require a code, approval through an app, or another form of confirmation in addition to your password.
If you provided banking or credit card information:
- Call the bank or card issuer using an official number.
- Explain that your information may have been exposed.
- Ask whether the account or card should be frozen or replaced.
- Review recent transactions carefully.
If you sent money, contact the bank, payment service, gift card company, or other company involved as soon as possible. Recovery is not guaranteed, but it is still worth asking whether the transaction can be stopped or reversed.
Simple Ways to Reduce Scam Texts
You may not be able to prevent every fraudulent message, but you can reduce your risk.
Use your phone’s spam filtering or “filter unknown senders” feature. Keep your phone’s operating system updated so that you receive current security protections. Protect important accounts with strong, unique passwords and multifactor authentication.
Avoid sharing your phone number publicly unless necessary. Be especially careful when entering it into online contests, surveys, advertisements, or unfamiliar websites.
Mobile carriers and government agencies continue to introduce tools and rules intended to block illegal robotexts, but some scam messages will still get through. Personal caution remains an important layer of protection.
Remember: Pause, Verify, and Protect
A legitimate organization will allow you time to verify a message. You do not need to click immediately, respond immediately, or make a rushed payment.
When an unexpected text asks for money, personal information, or urgent action, remember these three steps:
Pause. Do not let the message rush you.
Verify. Contact the person or organization using information you find independently.
Protect. Block the sender, report the message, and review your accounts when necessary.
Text message scams can be convincing, but a brief pause can prevent a costly mistake. When in doubt, do not respond. Ask someone you trust and contact the organization through an official channel.
