Text Message Scams (Smishing): How to Identify & Stop Them

Quick Answer

Don't click links in unexpected texts. Legitimate companies don't send urgent texts with shortened links. Check your account directly through official apps. Never reply to suspicious texts - it confirms your number is active.

Common Text Message Scams

1. Fake Package Delivery Texts

Example: "USPS: Your package is waiting. Confirm delivery address: [link]"

Reality: USPS uses usps.com domain and full tracking numbers. They never ask for "delivery fees" via text.

2. Bank Fraud Alerts

Example: "Bank Alert: Suspicious charge of $499.99 detected. Verify now: [link]"

Reality: Banks send alerts through official apps. Call your bank using the number on your card, not the text.

3. Verification Code Scams

Example: "Your verification code is 123456. If you didn't request this, click here: [link]"

Reality: Real verification codes never include links. Scammers hope you'll click out of concern.

4. Prize/Giveaway Scams

Example: "Congratulations! You've won a $1000 Amazon gift card. Claim now: [link]"

Reality: You can't win contests you didn't enter. These lead to phishing sites or subscription traps.

Red Flags of Smishing Texts

Shortened links (bit.ly, tinyurl) - legitimate companies use full URLs
Urgent language - "Act now!" "24 hours!" "Account suspended!"
From email addresses - texts from "name@domain.txt" are almost always scams
Generic greetings - "Dear Customer" instead of your name
Unexpected texts - about packages you didn't order, accounts you don't have
Requests for personal info - real companies don't ask via text
Poor grammar - typos and awkward phrasing

What If I Clicked a Link?

Take Action Now

Immediate Steps:

Don't enter any information on the page
Close your browser immediately
Delete the text message

If You Entered Information:

Change passwords for any accounts you entered
Enable 2-factor authentication
Call your bank if you entered financial info
Monitor accounts for unauthorized activity
Run antivirus scan on your phone

How to Protect Yourself

Best Practices:

Never click links in unexpected texts
Verify through official apps - check your bank app, Amazon app, etc.
Don't reply to suspicious texts - even "STOP" confirms your number is active
Block and delete suspicious senders
Enable spam filtering on your phone
Be skeptical of urgency - legitimate companies give you time

How to Verify Legitimacy:

Don't use links in the text
Open the official app or website directly
Check for alerts in your account
Call the company using official numbers (not numbers in the text)

How to Report Smishing

Forward to 7726 (SPAM) - free service that helps carriers block scammers
Report to FTC: reportfraud.ftc.gov
Report to company being impersonated (Amazon, USPS, your bank)
Block the sender on your phone

Text Message Scams (Smishing Guide)