You’re waiting on a package — new shoes, supposed to arrive Thursday — when the text comes in: “USPS: Your package could not be delivered due to incomplete address. Update within 24 hours: [link].” Your thumb hovers over the link. You are expecting a package. The timing is perfect. That’s not a coincidence; scammers blast millions of these texts precisely because at any given moment, thousands of recipients are waiting on a delivery. This is the decision moment this guide is built for: a suspicious text is on your screen right now, and you have about thirty seconds to figure out how to tell if a text is a scam — to read it like an investigator instead of a victim.
The scale of this problem is hard to overstate. The FTC’s April 2025 Data Spotlight reported that consumers lost $470 million to scams that started with text messages in 2024 — more than five times the 2020 figure. And in 2025, a text message was the single most commonly reported way scammers first reached people. The FTC’s top-five list of text scams reads like a greatest-hits album of modern fraud: fake package delivery problems, phony job offers and “task scams,” fake bank fraud alerts, bogus unpaid-toll notices, and “wrong number” openers that evolve into romance-flavored investment pitches.
Learning how to tell if a text is a scam isn’t about memorizing every scheme. It’s about recognizing the anatomy they all share. Eight red flags, one quick verification routine, and you’ll catch the overwhelming majority of them.
Why Scammers Love Your Phone’s Message App
Understanding the “why” makes the red flags obvious. Text messages have three advantages for criminals that email lost years ago. First, people read nearly every text, often within minutes — open rates crush email. Second, phone spam filtering is weaker than what Gmail and Outlook do for inboxes, so more junk reaches your eyes. Third, links in texts are short and hard to inspect — you can’t hover to preview a URL the way you can on a computer, and a text feels personal because it lands on the same screen as messages from your family.
That’s the whole game. A scam text is short on purpose: two lines, one link, one deadline. It’s designed to be read and acted on in the five seconds between your phone buzzing and your brain catching up. Your job is to insert a pause into that five-second window. Everything below is how.
8 Red Flags That Expose a Scam Text
Read your suspicious message against this list. You don’t need all eight — two or three together is enough to treat the text as hostile:
- Urgent threats or deadlines. “Pay within 24 hours or your license is suspended.” “Your account will be closed today.” Real organizations don’t conduct urgent business by scaring you over text. Urgency is there to stop you from thinking — treat it as evidence of a scam, not a reason to hurry.
- An unexpected link, especially a shortened or odd one. Legitimate companies rarely text you links out of the blue, and when they do, the domain matches the company. A link with a random string of characters, a URL shortener, or a domain that almost looks right (usps-track-info.top instead of usps.com) is the single biggest tell in text scams.
- The “wrong number” opener. “Hi, is this Linda?” or “Sorry, wrong number — but since I have you…” From a number you don’t know. The FTC specifically flags these: they often evolve into friendly conversation with romantic undertones, then pivot to a fake investment opportunity. A stranger who keeps chatting after a “wrong number” is not being friendly. They’re working.
- Too-good-to-be-true offers. You won a prize you never entered. A job paying $500 a day for rating products. A refund you weren’t expecting. If the text is offering you money for nothing, the money flows the other way — toward them.
- Requests for personal or financial details by text. Your bank will not ask for your full card number, PIN, or Social Security number over SMS. Neither will a government agency. Any text asking for sensitive data is either a scam or so insecure you should treat it like one.
- Demands to pay in a specific, unusual way. Gift cards, wire transfers, crypto, or payment apps — especially when the text insists on one method and hurries you. Real toll agencies and delivery companies accept normal payments through their official sites.
- Grammar and tone that feel off. Awkward phrasing, strange capitalization, or a “bank alert” written like a ransom note. Big institutions have copy editors; scammers running bulk campaigns often don’t.
- It references something you can’t verify independently. “A $1,240 Zelle payment was attempted from your account. Reply YES or NO.” You have no such transaction in your banking app. The text is the only evidence anything happened — because nothing happened. The text manufactured the emergency.
Notice the thread connecting all eight: the text wants you to act on its information, through its link or number, right now. Break any one of those three conditions and the scam falls apart.
How to Tell If a Text Is a Scam in Under 30 Seconds: The 5-Step Check
Red flags tell you something’s wrong. This routine tells you what’s right — run it before you tap, reply, or call back:
- Stop. Don’t touch the link. Not to “check if it’s real.” Tapping confirms to the scammer that your number is active, and the page itself may try to install malware or harvest your login.
- Ask: was I expecting this? A delivery text when you’re expecting a package is plausible; a toll notice from a state you’ve never driven in is not. But remember the shoes example — scammers exploit plausible timing on purpose, so “expected” is a weak pass, not a strong one.
- Verify through a channel you already trust. Open your banking app directly — not through the text’s link — and check for the alert. Go to the delivery company’s official site by typing the address yourself and enter the tracking number. Call the company on a number from its official website or the back of your card. Never use the phone number or link inside the suspicious text.
- Search the exact wording. Copy a distinctive phrase from the text into a search engine in quotes. Scam texts are sent by the millions, and victims and watchdogs post them constantly. If your “unique” message appears on scam-report sites, you have your answer.
- When in doubt, delete. A real bank, delivery company, or agency will reach you another way — email, app notification, physical mail. Deleting a real message costs you nothing; acting on a fake one can cost you everything. The asymmetry is the whole argument.
What Clicking, Replying, or Calling Back Actually Does
People underestimate the damage of “just” interacting. Here’s what each action hands the scammer:
Clicking the link can open a fake login page designed to steal your credentials, trigger a malware download, or simply confirm your number is live — which gets you added to “sucker lists” that scammers sell to other scammers. One tap can mean months of additional scam texts.
Replying — even “STOP” or “who is this?” — confirms a human reads that number. The FTC’s advice is blunt: don’t respond to unexpected texts at all. “STOP” only works for legitimate marketing lists you’ve actually subscribed to; to a scammer, any reply is a green light.
Calling the number back connects you to the scam operation, where trained manipulators run the second act — the fake fraud department, the “officer,” the helpful agent who needs your one-time code to “secure” your account. The text was just the audition. The call is the performance.
The safest response to a suspicious text is no response: forward it to 7726 (SPAM) so your carrier can identify the source, then delete it. That two-step — report, delete — is the entire playbook for a text you haven’t acted on.
Already Clicked or Replied? Do This Next
Don’t spiral — triage. If you clicked but entered nothing: close the page, update your phone’s software, and watch your accounts for unusual activity over the next few weeks. If you entered a password: change it immediately on the real site (typed by you, not via any link), and change it anywhere else you reused it. If you entered card or bank details: call your bank or card issuer right away and report the compromise. If you sent money: contact the payment service immediately — speed is your only chance at reversal — and then report to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov with screenshots of everything.
The Bottom Line
Every scam text is a bet that you’ll act before you think. The house wins that bet $470 million a year. Your counter is almost insultingly simple: pause, check the claim through a channel you chose yourself, and delete what you can’t verify. Eight red flags, five steps, thirty seconds. The text wants your panic. Give it your patience instead — and forward the thing to 7726 on your way out.
Quick reporting pointer: forward scam texts to 7726 (SPAM), report them in your messaging app (Apple Messages and Google Messages both have report options), and file with the FTC at ReportFraud.ftc.gov. A dedicated guide to reporting scam texts step-by-step is coming next.
Sources
- Pennsylvania Legal Aid Network (via FTC), “New FTC Data Show Top Text Message Scams of 2024; Overall Losses to Text Scams Hit $470 Million” (April 2025) — https://palegalaid.net/news/new-ftc-data-show-top-text-message-scams-2024-overall-losses-text-scams-hit-470-million
- The Scam Exposed, “7 Scam Texts You Should Never Answer” — https://thescamexposed.com/scam-text-messages
- Consumer Financial Services Law Monitor, “The FTC Shines Its Spotlight on the Top Text Scams of 2024” (2025) — https://www.consumerfinancialserviceslawmonitor.com/2025/04/the-ftc-shines-its-spotlight-on-the-top-text-scams-of-2024/
- IoT Marketing, “Unmasking the Top Five SMS Scams of 2024–2025” — https://iotmktg.com/unmasking-the-top-five-sms-scams-of-2024-2025/
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.