Text message scams, often called smishing, are texts that pretend to come from a toll agency, a delivery service, your bank, an employer or a friendly stranger so that you tap a link, reply, call a number or send money. The safe response is almost always the same: don’t use the link, phone number or code inside the text. Check with the company through its app or a website you type yourself, forward the text to 7726, then delete it.
People reported losing $470 million to scams that started with a text in 2024, according to the FTC’s review of the top text scams. The most-reported scripts, from fake package problems and phony jobs to unpaid-toll notices and “wrong number” texts, are all covered below.
How to tell if a text is a scam
You don’t need to recognize the exact scam. Scam texts make the same few moves, and one of them is reason enough to stop and check. If you spot two or more, treat the message as a scam.
- You weren’t expecting it. No recent order, no toll account, no job application.
- It sets a deadline or a penalty. “Today,” “final notice,” “late fee,” “your license will be suspended.”
- It wants you to act inside the message. Tap a link, scan a QR code, call a number, or reply YES, NO or Y.
- It asks for something only you should have. A verification code, card number, bank login or Social Security number.
- It wants an unusual payment. Gift cards, crypto, a wire transfer or a payment app instead of the way you normally pay.
- The link is almost right. A brand name with extra words or dashes, an odd ending, or a shortened link that hides where it goes.
- It tells you to reply “Y” and reopen the message. iPhones switch off links in messages from unknown senders; replying switches them back on.
- The sender doesn’t fit. An email address, a number from a state you have no ties to, or even your own number.
10 scam texts going around now
The wording changes every few weeks, but the scripts repeat. These are paraphrased versions of the texts US consumer agencies warn about most, each with the detail that gives it away.
1. The unpaid toll
Toll Services: Your vehicle has an unpaid toll balance of $6.89. Pay today to avoid a $50 late fee and a hold on your registration: [link]
The giveaway: a tiny amount, a big penalty and a same-day deadline. The FBI has warned about these texts since 2024 (IC3 alert), and they now copy real programs such as E-ZPass, SunPass and FasTrak.
2. The package on hold
USPS: Your package is on hold because the address is incomplete. Update it within 12 hours or it will be returned to the sender: [link]
The giveaway: a link to “confirm your address” or pay a redelivery fee. USPS texts you only if you requested tracking updates with a tracking number, and those texts have no link, says the U.S. Postal Inspection Service.
3. The fake fraud alert
[Bank name] Fraud Alert: Did you attempt a purchase of $1,249.00 at an electronics store? Reply YES or NO.
The giveaway: what follows your reply. A “fraud specialist” calls, asks for a code or tells you to move money to a “safe account.” Real banks send fraud alerts, but they won’t ask you to move money to protect it.
4. The traffic ticket or court notice
FINAL NOTICE: Our records show an unpaid traffic violation. Pay by [date] to avoid license suspension, added fines and a court hearing. Scan the code or tap: [link]
The giveaway: threats of suspension and court dates, often with a fake state seal and a QR code. The FTC’s advice: don’t respond or scan the code, and look up the case on the court’s own website.
5. The job you never applied for
Hi, I’m Ashley, a recruiter with [staffing company]. We have a remote role: 60–90 minutes a day, $200–$500 a day. Reply YES to learn more.
The giveaway: big pay for vague, simple work. These “task scams” later ask you to deposit money to unlock your earnings. Never pay to get paid; see how to spot a fake recruiter.
6. The “wrong number”
Hi Jenny, still on for dinner Saturday? [after you reply] Oh, sorry, wrong number! You seem nice, though. Where are you based?
The giveaway: a friendly mistake that becomes daily chats, then flirting, then a “can’t-lose” crypto investment. The FTC says it isn’t rude to ignore these. More in how to avoid romance scams.
7. “Hi Mom, this is my new number”
Hi Mom, I dropped my phone in the sink, this is my new number. Can you help me pay a bill today? I’ll pay you back this week.
The giveaway: a new number, an urgent money request and a reason they can’t talk. Call or text your child at the number you already have first.
8. “I sent you my code by mistake”
Sorry, I accidentally sent my verification code to your number. Could you text it back to me?
The giveaway: that code exists because someone is trying to get into your account or tie a new account to your number. The FTC’s rule: never share a verification code.
9. The locked account
Your account has been suspended due to a billing problem. Verify your payment details within 24 hours to keep access: [link]
The giveaway: a generic greeting, no account details and a login link. Open the company’s app yourself; a real problem will be waiting there.
10. The prize or free gift
Congratulations! You’ve been selected for a $500 gift card. Claim it now, just cover shipping: [link]
The giveaway: you must pay, or hand over card details, to get something free. The same tricks arrive by email; see how to tell if an email is real.
Is it real? Check without touching the text
One habit defeats nearly every scam text: never use the contact details the message gives you. Reach the organization through a route you already trust, then look for the problem there.
| If the text claims to be from… | Check it this way | Never |
|---|---|---|
| A toll agency | Your account in the toll agency’s app or on a website you type in yourself | Pay through the link in the text |
| USPS, UPS or FedEx | The tracking number from your order confirmation, entered on the carrier’s own site | Pay a “redelivery fee” by text |
| Your bank or card company | The number on the back of your card, or the bank’s app | Read back a code or move money to a “safe account” |
| A court or the DMV | The court’s or DMV’s own website, or a phone number you look up yourself | Scan a QR code from the text |
| Amazon, Apple, Netflix or another account | The app you already use, signed in the usual way | Log in through the link in the text |
| An employer or recruiter | The company’s careers page and main phone line | Pay for training, equipment or “task” upgrades |
| A family member on a new number | A call or text to the number you already have | Send money before you’ve spoken to them |
| A stranger who texted by mistake | Nothing to check: don’t reply | Take investment tips from them |
When the sender is a person rather than a company, the phone number won’t tell you much. An area code only shows where a number was first assigned, not where the sender is, and scammers use spoofed and internet-based VoIP numbers. Our US area code directory explains what a code can and can’t tell you.
How to report a scam text
Reporting takes a few taps and helps carriers and investigators block the next wave. Do it before you delete the message.
- Screenshot it. Capture the sender and the full message in case your bank or a report needs it.
- Forward it to 7726. The number spells SPAM. Major carriers accept these reports at no charge, and yours may reply asking for the number the text came from.
- Report it in your messaging app. This sends the sender’s details to Apple or Google, and on some phones to your carrier.
- Tell the FTC at ReportFraud.ftc.gov, especially if you lost money or shared information.
- Add the right specialist. Paste USPS-themed texts into an email to spam@uspis.gov. If you lost money, also file with the FBI at ic3.gov, including the sender’s number and the web address from the text.
- Block and delete. Don’t reply, even to say STOP.
iPhone: report junk and filter unknown senders
Open the conversation and tap Report Junk if it appears under the message; it shows for senders who aren’t in your contacts. To keep unknown senders out of your main list, turn on Filter Unknown Senders or Screen Unknown Senders (the name depends on your iOS version) in the Messages settings.
Android (Google Messages): block and report spam
Touch and hold the conversation, tap Block, keep Report spam checked and tap OK. The conversation moves to the Spam & blocked folder. Make sure spam protection is on in the Messages settings.
Already replied, clicked or paid? What to do now
Don’t panic, and don’t wait. Deal with money and passwords first, then report. Find the row that matches what happened.
| What happened | Do this first | Then |
|---|---|---|
| You replied but shared nothing | Stop replying and block the number | Report later texts to 7726. A reply alone doesn’t give anyone access to your phone or accounts. |
| You tapped the link but typed nothing | Close the page; don’t download anything it offers | Update your phone. If you started typing card details, even without pressing Submit, call your bank: some fake pages capture keystrokes as you type. |
| You entered a card number | Call the issuer at the number on the back of the card and ask for a new card | Dispute any charges you don’t recognize. |
| You entered a one-time code the page asked for | Tell your bank at once: the code may have added your card to a scammer’s phone wallet | Ask the bank to remove any device or wallet you don’t recognize. |
| You entered a password or shared a login code | Change the password in the real app or website, and anywhere you reused it | Turn on two-step verification and sign out unknown devices. |
| You gave your Social Security number | Get a recovery plan at IdentityTheft.gov | Place a free credit freeze with Equifax, Experian and TransUnion. |
| You sent money | Call whoever moved it (card issuer, bank, payment app, gift card company, wire service or crypto exchange) and ask to reverse it | Report to the FTC and IC3; keep receipts and screenshots. |
The FTC’s guide to what to do if you were scammed covers each payment method. Card payments usually come with dispute rights; bank transfers, payment apps, gift cards, wires and crypto are much harder to reverse, so call those companies first.
How to get fewer scam texts
You can’t stop every scam text, but you can make them rarer and easier to ignore.
- Turn on your phone’s spam filter (steps above) and check your carrier’s spam-blocking options.
- Don’t reply to unknown senders, even to say STOP or ask who they are.
- Keep your number off public posts, giveaways and contest forms, and follow the other steps in how to protect your personal information online.
- If scam texts use your name, your details are circulating. See what a stranger can find about you and remove your own listing; both are free. It won’t stop random spam, but it gives a targeted scammer less to work with.
Common questions about text message scams
What happens if I reply to a scam text?
Usually nothing immediate: a reply doesn’t give anyone access to your phone or accounts. It does tell the sender your number is active, so you may get more texts or a follow-up call. Stop replying, block the number and report later texts to 7726.
What should I do if I clicked a link in a scam text?
Close the page and don’t enter anything else. If you typed nothing, update your phone and delete the text. If you entered a card number, password, one-time code or Social Security number, act on that first: call your card issuer, change the password or get a plan at IdentityTheft.gov.
Can my phone get hacked just by opening a scam text?
For most people, no. On a phone with up-to-date software, reading a text isn’t the risky part; the danger starts when you tap the link and type something, install an app or profile, or keep chatting. Leave automatic updates on so security fixes arrive quickly.
Should I reply STOP to a spam text?
Only if it comes from a business you knowingly signed up with. For texts from unknown numbers, replying STOP, or anything else, confirms that a real person reads messages at your number. Report, block and delete instead.
Is it free to forward a text to 7726, and what happens next?
Major US carriers accept forwards to 7726 at no charge. Your carrier may ask for the number the text came from; the report helps it block similar messages. It won’t recover money, so if you paid, call your bank and report to the FTC too.
How did scammers get my number, and how do they know my name?
Many scam texts go to numbers generated at random or bought in bulk, so one text doesn’t mean you were singled out. Texts that use your name often draw on data breaches, marketing lists or people-search listings. Recordwell lets you see what a stranger finds about you and remove your own listing for free.
Can I find out who sent a scam text?
Usually not. Scam texts come from spoofed, disposable or internet-based numbers, and an area code only shows where a number was first assigned. Recordwell can’t look up phone numbers; it searches by first and last name, so it helps only if the sender gave you a name. Reports to the FTC and IC3 put the number in front of investigators.