Identify text message scams: Examples and how to identify them

Not every text message asking you to click a link is legitimate. In fact, a growing share of them aren't.

According to the FTC, U.S. consumers reported $470 million in losses to scams that started with a text message in 2024 alone, more than five times what was lost in 2020. Text scams, also known as smishing (a blend of "SMS" and "phishing"), work because a text feels more personal and more urgent than an email, and because most people still trust their phone more than their inbox.

That trust gap is exactly what scammers exploit. Verizon's 2026 Data Breach Investigations Report found that mobile-centric phishing, including text messages, produces click rates roughly 40 percent higher than email phishing in simulated attacks. This guide covers the most common types of text message scams, real examples of what they look like, the red flags that give them away and what to do if you get one.

Why these scams work so well

Smishing doesn't rely on sophisticated hacking. It relies on familiarity and urgency. A text about a delayed package or an unpaid toll sounds routine enough that most people don't stop to question it, especially when the message is designed to make you act fast before you think it through.

The scale of the problem keeps growing too. Fake package-delivery messages are now the most commonly reported text scam in FTC data, and bank impersonation alone accounts for roughly 10 percent of all reported smishing messages.

Common red flags across almost every scam text

Before getting into specific examples, a few warning signs show up across nearly every type of text scam:

• A sense of urgency: "act now," "final notice," "your account will be suspended." Legitimate organizations rarely demand an immediate response over text.
• A link that doesn't match the organization it claims to be from, often a shortened URL or a domain with extra words tacked on, like "usps-track-help.com" instead of usps.com.
• A generic greeting, or no greeting at all, rather than your actual name.
• A request for sensitive information: passwords, full card numbers, Social Security numbers or one-time login codes. Legitimate organizations don't ask for these over text.
• A message from a number you don't recognize, especially one using a standard 10-digit phone number rather than a registered short code, for something that's supposedly from a major bank, carrier or delivery service.
• Poor grammar or phrasing that feels slightly off, though AI tools have made this red flag less reliable than it used to be.

Package delivery scams

This is currently the most reported text scam type. You get a message claiming a package can't be delivered, often citing an incorrect address or an unpaid shipping fee, with a link to "fix" the issue.

• Example text
• USPS: Your package is pending delivery due to an unpaid shipping fee. Please update your information here to avoid return: [suspicious link]

The trick works because it's plausible almost year-round, and because many people order enough packages that a delivery issue doesn't sound unusual. The U.S. Postal Inspection Service is explicit on this: USPS does not send unsolicited texts asking you to click a link about a delivery issue unless you specifically signed up for tracking alerts.

Toll violation scams

Viral in recent years, this scam impersonates toll agencies like E-ZPass or SunPass and claims you owe a small unpaid toll, often paired with a threat of late fees or legal trouble.

• Example text
• SunPass Alert: You have an unpaid toll of $3.25. Pay now to avoid additional fees: [suspicious link]

The dollar amount is deliberately small. A tiny fee feels believable and easy to just pay without a second thought, which is exactly the point. The FBI issued a specific warning about this scam targeting drivers nationwide.

Bank and account alert scams

These messages claim suspicious activity was detected on your bank account, card or payment app, and push you to click a link or call a number to "verify" your identity.

• Example text
• ALERT: Unusual activity detected on your account. Verify your identity now to avoid a temporary hold: [suspicious link]

This one is particularly dangerous because it plays on financial anxiety specifically, and the fake verification page is often built to look identical to the real bank's login page. If you ever get a message like this, don't use the link. Log into your account directly through the bank's official app or website, or call the number printed on your card.

Prize and giveaway scams

You're told you've won a gift card, a sweepstakes prize or a free product, and just need to click a link or pay a small "processing fee" to claim it.

• Example text
• Congratulations! You've won a $1,000 Target gift card. Claim your prize here: [suspicious link]

A simple rule covers almost every version of this scam: you can't win a contest you never entered.

Fake job offer scams

These texts offer a high-paying, flexible or remote job, often with vague duties, and ask you to click a link or reply with personal details to "apply."

• Example text
• Hi, we saw your resume online. Earn $35-45/hr working from home, flexible hours, no experience needed. Reply YES to learn more.

Legitimate employers overwhelmingly don't recruit cold over text message, and they don't ask for banking details or a Social Security number before an actual interview.

Government agency impersonation scams

Scammers pose as the IRS, a toll authority, local police or another government agency, claiming you owe money, face a fine or need to confirm eligibility for a benefit.

• Example text
• IRS Notice: You are eligible for a tax refund of $842.50. Submit your bank details here to receive payment: [suspicious link]

The IRS and most government agencies do not initiate contact by text message, and they never ask for payment via gift cards, wire transfer or a link in a text.

Wrong number scams

This one plays the long game. A friendly, seemingly misdirected text starts a casual conversation ("Hey, is this still Mike's Pizza? Sorry, wrong number!"), and if you respond, the scammer keeps chatting to build rapport before eventually pivoting to a crypto investment pitch or a request for money.

Because there's no link or urgent demand in the opening message, this scam is easy to miss. If a stranger claiming a wrong number keeps the conversation going past a simple correction, that's the signal to stop responding.

What legitimate business texting actually looks like

Knowing the difference matters for businesses too, since your own SMS marketing needs to look nothing like the scams above. Legitimate business texting is:

• Consent-based, meaning the recipient opted in at some point, rather than being texted cold
• Sent from a registered, consistent sending number rather than one that changes every message
• Clear about who's sending it, right in the message itself
• Never asking for a password, full card number or one-time login code through a link
• Compliant with a real, working opt-out (Reply STOP to unsubscribe), which is a legal requirement, not just a courtesy

See carrier violations and what to avoid during SMS text marketing and our nine do's and don'ts of SMS text message marketing if you're running SMS campaigns yourself. Following these practices doesn't just keep you compliant, it also keeps your messages clearly distinguishable from the scams your own customers are learning to distrust.

What to do if you get a scam text

A few clear steps handle almost every situation:

• Don't click the link, call the number or reply, even with "STOP." Replying to an unknown, suspicious number confirms your number is active and often leads to more spam, not less. STOP only works reliably for legitimate senders you actually subscribed to.
• Verify independently. If a message claims to be from your bank, delivery service or employer, contact them directly through their official app, website or the number on your card, not anything provided in the text.
• Forward the message to 7726 (SPAM). Most major U.S. carriers use this shortcode to flag and help block scam texts.
• Report it to the FTC at reportfraud.ftc.gov, and if you lost money, also file a report with the FBI's Internet Crime Complaint Center at ic3.gov.
• Delete and block the sender once you've reported it.

If you already clicked or responded

If you clicked a link, entered information or sent money before realizing it was a scam, act quickly:

• Contact your bank or card issuer immediately if you shared any financial information, so they can monitor or freeze the account.
• Change passwords on any account where you may have entered credentials, and enable multi-factor authentication where it isn't already on.
• Place a fraud alert or credit freeze with the major credit bureaus if you shared your Social Security number or other identifying information.
• Monitor your accounts and credit report closely over the following weeks for any unfamiliar activity.

In conclusion

Text scams work by borrowing the routine, low-friction feeling of a normal notification and using it to short-circuit your judgment for just long enough to get a click. Slowing down for even a few seconds, checking the sender, and verifying independently through an official channel defeats nearly every version of this scam.

If you run SMS marketing for your own business, the same trust problem cuts both ways. Every scam text makes consumers a little warier of texts from businesses generally, which makes it even more important that your own messages are clearly compliant, clearly identified and genuinely useful. See SMS marketing ideas and how to get started for what that looks like done well.

DailyStory helps businesses run compliant, trusted SMS and email marketing campaigns, the kind customers actually want to receive. Schedule your free demo with us today.