How to tell if a text message is a scam: 9 signs and a 60 second check
Text messages are now the most common way scammers reach people. Learn the nine signs, see marked-up examples, and know exactly what to do with a suspicious text.
Key takeaways
- A text you did not expect, that wants you to tap, pay, call, or reply quickly, should be treated as suspicious until you have checked it another way.
- The sender's name and number prove nothing. Both can be faked.
- Never use the link or phone number in the text. Open the company's app or type its address yourself.
- Forward scam texts to 7726 (SPAM) so your carrier can block the sender, then delete them.
- Replying, even with STOP, tells the sender your number is active.
Why texts are the scammer's favorite tool
The FTC told Congress in March 2026 that a text message was the most common way scammers first reached the people who reported fraud in 2025. It is easy to see why. Texts are cheap to send by the million, they arrive on a small screen that hides details, and people open almost all of them within minutes.
A scam text needs you to do one of four things: tap a link, call a number, reply, or pay. Everything else in the message exists to get you there before you stop to think.
The nine signs
- You were not expecting it. A delivery you did not order, a toll road you did not drive, a bank you do not use, a prize you did not enter.
- It wants speed. "Within 12 hours", "final notice", "today only", "to avoid suspension". Real organizations give you time and send reminders.
- It has a link, and the link is odd. Look at the part just before the first single slash. In
usps.parcel-help.example.com/track, the real site isexample.com, not USPS. Our guide to checking links shows how to read any address. - It asks for a small payment. $1.80 for redelivery, $4.15 for a toll. The small amount is bait. The goal is your card number.
- It asks for a code, password, or PIN. Nobody legitimate needs you to send these to them.
- The greeting is generic or wrong. "Dear customer", or your email address used as your name.
- The sender is a normal mobile number, an email address, or an international number, when the organization would normally use a short code.
- It asks you to reply to "activate" a link. Some phones disable links from unknown senders. Scammers ask you to reply Y or copy the link into your browser to get around that protection.
- It is a wrong-number text that turns friendly. "Hi Anna, are we still on for dinner?" followed by warm chat is a common opening for investment and romance scams.
One sign is enough to slow down. Two or more, treat it as a scam.
Three examples, marked up
The delivery text
"USPS: Your parcel could not be delivered due to an incomplete address. Update within 12 hours: usps.parcel-help.example.com/track"
- A deadline measured in hours. Carriers hold parcels for days.
- The link's real domain is not the carrier's.
- No tracking number that you could look up yourself.
The bank alert
"Chase Fraud Alert: Did you attempt a $1,249.00 Zelle transfer? Reply YES or NO."
- Replying connects you to a person who "helps" by asking you to move money or read out a code.
- A real alert can be confirmed by opening your banking app. If nothing is there, there was no alert.
The new number
"Hi Mom, I dropped my phone, this is my new number. Can you send me $600 for rent today? I'll explain later."
- A new number, money, and a reason you cannot call.
- One call to the number you already have saved settles it.
The 60 second check
- Do nothing in the message. No tap, no reply, no call.
- Ask: was I expecting this? If not, that alone is a reason to check.
- Go the long way round. Open the company's app, type its web address yourself, or call the number on your card or bill. If the problem is real, you will see it there.
- Paste the text into our checker to see the warning signs explained. It runs in your browser and nothing is sent anywhere.
- Forward it to 7726 (the letters SPAM on a keypad). This is free on major U.S. carriers and helps them block the sender.
- Block the number and delete the text.
What real messages look like
Real organizations do text people, which is what makes this hard. The difference is what they ask for.
| A real message usually | A scam message usually |
|---|---|
| Follows something you just did, such as an order or a login | Arrives out of nowhere |
| Tells you to check in the app or on your account | Gives you a link or number and tells you to hurry |
| Says "we will never ask for this code" | Asks you to send or read out a code |
| Still makes sense if you ignore it for a day | Threatens a consequence within hours |
If you are unsure, it costs nothing to check through a route you already trust. A real bank, agency, or relative will still be there in ten minutes.
If you already tapped, replied, or paid
- Tapped only: close the page. Harm from a tap alone is rare.
- Entered a password: change it on the real site now, and anywhere else you used it. Turn on two-factor sign-in.
- Entered card details: call the number on the back of the card, say it was a scam, and ask for a new card.
- Sent money: contact the bank or app you used immediately. Minutes matter. See how to get your money back.
Then report it at ReportFraud.ftc.gov. It takes a few minutes and it is how these patterns get tracked.
Common questions
Can you get scammed just by opening a text message?
Reading a text is very unlikely to cause harm. The risk begins when you tap a link, call a number in the message, reply, or install something. If you only opened it, delete it and move on.
Should I reply STOP to a scam text?
No. STOP works for real businesses that follow the rules. A scammer treats any reply as proof that your number is live, which can lead to more messages. Forward the text to 7726, block the number, and delete it.
What happens if I clicked a link in a scam text?
If you tapped the link but typed nothing, close the page. Harm from a tap alone is rare. If you entered a password, change it on the real site and anywhere else you used it. If you entered card details, call the number on the back of your card and ask for a replacement. Our recovery page walks through each case.
How do scammers get my phone number?
Often they do not. Many texts are sent to number ranges in bulk. Numbers are also collected from data breaches, public profiles, and marketing lists. Receiving a scam text does not mean you were singled out or that an account was hacked.
Official sources and further reading
- FTC: How To Recognize and Avoid Phishing Scams
- FTC: How To Avoid a Scam
- FTC prepared testimony, March 2026: text was the top reported contact method in 2025 (PDF)
- FCC: Stop unwanted robocalls and texts
Published September 21, 2026, last updated September 21, 2026. This guide is general education for people in the United States. It is not legal or financial advice, and it cannot tell you whether a particular message or person is genuine. Spot an error? Tell us.