Pause before using the link or phone number
A message arrives claiming your package cannot be delivered, your bank account needs attention or a toll payment is overdue. It may arrive at a believable moment. The first step is to leave the message's links and phone numbers alone while you check the claim elsewhere.
Open the company's app yourself or use a website or phone number you already trust. Confirm the issue there before entering information or making a payment.
The FTC's spam text guide describes messages designed to collect personal information or lead you to a fake sign-in page. Receiving a text is not evidence that its sender represents the company named in it.
Look at the request, not just the spelling
Scam messages can be polished. Focus on what the sender wants you to do and whether you can verify it independently.
| The text claims | Your independent check |
|---|---|
| A package needs a new address or small payment | Use the order confirmation you already have and the carrier's official tracking route. |
| A bank transaction needs approval | Open your banking app or call the number printed on your card. |
| A toll must be paid immediately | Use the toll agency website you independently verified. |
| You must sign in to prevent an account closure | Open the service directly and review its account notices. |
The FTC's overview of reported text scams includes delivery, bank-alert and toll-payment impersonation. Those examples help you recognize a pattern; they do not replace checking the specific message.
Use a second route to verify the story
Imagine you are expecting a delivery and receive a message about an address problem. Find the tracking number in the order you placed, open the carrier's site independently and compare the delivery status there. If needed, contact support through that site.
This check does not require deciding whether every character in the text looks suspicious. It asks a more useful question: does the claimed problem exist in the account or order you already know?
A logo or familiar phrase is easy to copy. A secure-looking page also is not proof of a legitimate business. Our public Wi-Fi guide explains why an encrypted connection and a trustworthy destination are separate checks.
Report the message and reduce repeat interruptions
In the U.S., the FTC recommends forwarding unwanted texts to 7726, using your messaging app's report-junk or report-spam option, and reporting suspected fraud at ReportFraud.ftc.gov. Carrier and app options vary.
Block the sender using your phone's normal controls. Keep relevant evidence first if you need it for a fraud report. Avoid forwarding a clickable scam link to relatives as a warning; a screenshot with personal details hidden is easier to discuss without inviting another click.
For a suspicious message, do not reply simply to argue with the sender. Handle unwanted messages through the reporting controls or the company's verified support route.
If you already clicked or entered information
Start by writing down what happened: opened a page, entered a password, supplied a verification code, downloaded something or made a payment. Those are different exposures.
- Entered a password: go to the real service, change it and review account access. Follow the provider's recovery instructions. Google's compromised-account guide includes security activity and device checks.
- Paid or shared card details: contact the bank or payment provider promptly through a trusted route. The FTC's scam-response guide explains whom to contact for different payment methods. Recovery is not guaranteed.
- Shared identity information or suspect harmful software: use the FTC's phishing response guidance and the device or account provider's official support.
If this involves a work account or device, notify your IT team quickly. Tell them what you did; do not hide the message or try a factory reset before they can assess it.
Make one useful habit stick
Choose a household rule: unexpected messages about money or account access get checked through a separate trusted route. You do not have to inspect every link to use that rule.
For example, keep the banking app easy to find and save the carrier tracking page you actually use. Then the safer route is convenient when an urgent message arrives.
Scams can also arrive through email or a printed code. Continue with our QR code guide and business email security guide for related checks.
Keep the account basics in one place.
Our free security checklist covers passwords, multi-factor authentication, updates and backups. Use it as a starting point for a small business or home office.