Text Message Scams

How fake text messages — sometimes called "smishing" — trick seniors into clicking dangerous links or giving up bank details.

How the Scam Works

A text message arrives on your phone. It looks like it's from USPS, FedEx, your bank, Amazon, or the IRS. The message might say: "USPS: Your package could not be delivered. Update your address: [link]" or "Bank of America: Suspicious charge of $497.85. Reply YES to confirm or NO to dispute." The text feels routine and the link looks almost real.

This is called "smishing" — short for SMS phishing. The link in the text leads to a fake website that looks identical to the real one. When you "log in" or "update your information," you are actually handing your username, password, credit card number, or Social Security number directly to the criminals.

Some smishing texts install malware on your phone if you click the link. The malware can read your text messages (including bank verification codes), record your keystrokes, or take over your phone's microphone and camera. Other texts pretend to be from a grandchild in trouble, your doctor, or a romantic interest as the opening move in a longer scam.

Common text scam categories:

•Delivery scams: "Your package is delayed — pay $1.99 to reschedule."
•Bank alerts: "Unusual login from Nigeria. Verify immediately."
•Toll road scams: "You have an unpaid toll. Pay now to avoid fines: [link]"
•"Wrong number" texts: A friendly chat that develops into a romance or investment scam.
•Prize/sweepstakes: "You've won! Click here to claim."

Real-World Example

📱 Real Case

A 72-year-old grandmother in Arizona received a text claiming she had an unpaid SunPass toll of $6.95. The message included a realistic link to "sunpass-toll-update.com." She entered her credit card number to pay the small fee. Within 24 hours, scammers used her card to make $4,200 in fraudulent purchases. The real toll system never texts customers about unpaid tolls.

Warning Signs

•Unexpected texts with links: If you didn't request the message, treat any link inside as dangerous.
•Urgency: "Verify within 24 hours," "Your account will be closed," "Final notice."
•Strange or shortened links: bit.ly, tinyurl, or made-up domains like "amaz0n-secure.net" or "usps-tracking-mail.com".
•"Reply YES/NO": Banks rarely use this format. Replying confirms your number is active for more scams.
•Generic greetings: "Dear customer" instead of your actual name.
•Wrong number that keeps chatting: Real wrong numbers say "sorry" and disappear. Scammers try to start a friendly conversation.

How to Protect Yourself

✓Never click links in unexpected texts. Even from companies you trust. Open the official app or website directly instead.
✓Verify by calling. If your "bank" texts you about fraud, call the number on the back of your card. Don't reply or call the number in the text.
✓Forward suspicious texts to 7726 (SPAM). This is a free service from all major carriers that helps them block similar scams.
✓Don't reply — even "STOP". Replying confirms your number is active. Just delete and block.
✓Block the sender. On iPhone: tap the number → "Block Caller." On Android: long-press the message → "Block number."
✓If you clicked a link: Don't enter any information. If you did, change your passwords from a different device and call your bank.
✓Report it. File at ReportFraud.ftc.gov.

Got a Suspicious Call, Pop-up, or Text?

Use our free Scam Checker to instantly analyze any phone number, email, or website for known scam patterns.