How to tell if a text message is a scam

Most scam texts follow the same short script. They arrive out of the blue, claim something is wrong or waiting for you, and ask you to act through a link, a phone number or a reply. The same warning signs appear again and again.

Pressure: a deadline, a late fee, a suspended account or a warning that something will happen “today.” Surprise: a package you didn’t order, a toll you don’t remember, a prize you never entered for. A link or number to use instead of the official app. A request for money, gift cards, crypto, a one-time code or personal details. And a sender you don’t recognize, often a number from another state, an email address or an unfamiliar short code.

One sign on its own doesn’t prove a scam. Real companies send delivery updates and fraud alerts too. Several signs together, especially pressure plus a link, are a strong reason to stop.

If a text contains a link, look at the domain: the part before the first single slash. Scam links often borrow a brand name and add extra words or an unusual ending, such as a toll agency’s name followed by “-pay” and a .top or .info ending. Real companies usually send you to their main website or ask you to open their app.

Don’t tap a link just to see where it goes. Some pages start collecting information as soon as they load, and many are built to look exactly like the real site. If you need to check an account, type the company’s web address yourself or open the app you already use.

Replying, even with STOP, tells the sender your number is active. Instead, look the number up to see whether other people have reported it, or paste the whole message into ContactCheckup’s scam check, which reads the wording and the links as well as the number.

Scammers rotate and spoof numbers. A number with no reports can still be a scam, and a real company’s number can be faked. Treat the message itself as the main evidence.

The FTC notes that legitimate companies won’t ask for information about your account by text. Banks, carriers and toll agencies may text you alerts, but they don’t ask you to reply with a password, PIN or one-time code, and they don’t demand payment by gift card or crypto.

When a text claims to come from a company you do business with, contact the company through a phone number or website you already know is real, such as the number on your card, the app on your phone or a bookmarked site. Don’t use the contact details in the message.

Forward the message to 7726 (SPAM) so your carrier can block similar texts, use the “report junk” option in your messaging app, and report it to the FTC at ReportFraud.ftc.gov. You can also report it on ContactCheckup so the next person who looks up the number sees the warning.

If you entered a password, change it right away and turn on two-step verification. If you entered card or bank details, call the number on the back of your card and ask about stopping or disputing charges. If you shared your Social Security number, consider freezing your credit and follow the recovery steps at IdentityTheft.gov. Acting quickly limits the damage.