Linda, a retired school secretary in Tampa, got a text on a Tuesday morning that looked like it came from the state toll agency. “You have an unpaid toll balance of $6.99. Pay now to avoid a late fee of $50.” There was a link. She had driven through a toll road the week before. She almost tapped it.
Quick version: watch the Web Story for the highlights in under a minute.
What stopped her was a small detail: her state’s toll system is a different brand than the one in the message. She deleted the text, then called her daughter, who told her she was the third person that week to ask. Linda is a composite example, but the story is very common, and it is the kind of thing that costs real people real money every day.
Text message scams, often called “smishing,” are among the fastest-growing types of fraud in the United States. This guide shows you how to recognize them, what the most common types look like, and exactly what to do if you already clicked, replied or sent money.
Key takeaways
- Real companies and government agencies rarely text you a link and demand immediate action.
- Urgency, a link you did not ask for, and a request for money or personal details are the three biggest red flags.
- Never tap the link. Go to the company’s official app or website by typing the address yourself.
- Forward scam texts to 7726 (SPAM) and report them to the FTC at ReportFraud.ftc.gov.
- If you did click or share information, act within minutes. Speed limits the damage.
Why text scams work so well
Texts feel personal. We read almost all of them, and most are read within minutes. A phone screen is small, so it is harder to inspect a link before tapping it. And scammers know that a message arriving at the right moment (you really did order a package this week, or you really do have a bank account) feels believable.
The Federal Trade Commission reported that consumers lost more than $12 billion to fraud in 2024, and that text scams alone accounted for roughly $470 million in reported losses that year, several times the amount in 2020. Those are only the cases people reported. Many victims never tell anyone because they feel embarrassed. If you have been targeted, you are in very large company, and there is no shame in it.
The 12 red flags of a scam text
- It creates urgency. “Act now,” “final notice,” “your account will be closed in 24 hours.” Real problems rarely have a 24-hour countdown over text.
- It contains a link you did not ask for. If you did not request a verification code or a receipt, treat the link as suspect.
- It comes from a strange number or an email address. Messages from regular 10-digit numbers that claim to be a bank are suspicious. Texts from emails (like name@gmail.com) are even worse.
- It asks for money in an odd way. Gift cards, wire transfers, crypto, Zelle or Venmo to a stranger are classic scam payments, because they are hard to reverse.
- It asks for personal details. Your Social Security number, date of birth, bank login or one-time passcode should never be shared in response to a text.
- It claims to be from the government. The IRS, Social Security Administration and Medicare do not start contact with a text message demanding payment or personal details.
- The grammar or branding is slightly off. Odd spacing, a misspelled company name or a logo that looks fuzzy.
- It says you won something. A prize, a gift card, a refund you did not apply for. If you did not enter, you did not win.
- It is a “wrong number” opener. “Hi, is this Mike? We have dinner on Friday.” Friendly, harmless, and the first step in a long con.
- It uses a shortened or look-alike link. Addresses like “usps-tracking-help.com” or a bit.ly link that hides the real destination.
- It threatens you. Arrest, lawsuit, deportation, frozen accounts. Fear shuts down careful thinking, which is the whole point.
- It tells you to keep it secret. Real banks never tell you to lie to a teller or to avoid talking to your family.
The most common text scams in 2026
1. Unpaid toll and parking fee texts
Texts that claim you owe a small toll balance or a parking ticket exploded over the last couple of years. The amount is low on purpose, so you pay quickly without checking. The link leads to a convincing copy of a toll website that collects your card number. If you drive toll roads, look at your account through the official toll app or website, never through a text link.
2. Package delivery problems
“Your package could not be delivered. Confirm your address.” These imitate USPS, UPS, FedEx and Amazon. During the holiday rush they spike, because nearly everyone is waiting on a delivery. Our holiday shipping deadlines guide is a good reminder of how carriers really handle tracking: through your own account, not a random text.
3. Fake bank fraud alerts
“Did you attempt a $950 purchase at Best Buy? Reply YES or NO.” If you reply, a scammer calls you pretending to be the bank’s fraud department, then talks you into moving your money to a “safe account.” There is no safe account. Hang up and call the number printed on the back of your card.
4. Wrong-number and relationship scams
A stranger “accidentally” texts you and, when you reply politely, starts a conversation. Weeks later, they mention an amazing cryptocurrency or investment tip. This long-game fraud is often called pig butchering, and victims can lose tens or hundreds of thousands of dollars. If someone you have never met in person suggests an investment, stop.
5. “Hi Mom” and family emergency texts
“Hi Mom, I lost my phone. This is my new number. Can you send me money?” The cure is a family code word that only real relatives know, and a rule that you always call the person’s old number before sending anything.
6. Job offers out of nowhere
A text about an easy remote job paying $300 a day for rating products or “boosting” app downloads. The job usually asks you to deposit your own money first to “unlock” your earnings. Legitimate employers do not recruit this way.
7. Fake Amazon, Apple and subscription charges
“Your Apple ID was charged $599. If this was not you, call this number.” The number connects to a scammer who asks for remote access to your computer. If a subscription charge worries you, check it inside your actual account.
A simple three-step test before you tap anything
- Pause. Give it 60 seconds. Scammers need you to act fast. Slowing down is the best defense you have.
- Verify on your own. Open the company’s official app, or type the website address yourself, or call the number on the back of your card or on a recent statement. Do not use any link or phone number in the text.
- Ask someone. A spouse, a neighbor, a coworker, or a teenager in the family. A second pair of eyes catches what you miss.
What to do if you already clicked or replied
First, stay calm. Clicking a link is not always the end of the world, and quick action makes a big difference. Match what you did to the steps below.
| What happened | What to do right away |
|---|---|
| Tapped the link but entered nothing | Close the page, clear your browser history, and run a security scan if your phone has one. Delete the text. |
| Entered a password | Change that password immediately everywhere you use it. Turn on two-factor authentication. |
| Entered card or bank details | Call the number on the back of the card and ask to cancel it and dispute any charges. Watch statements for weeks. |
| Shared your Social Security number | Freeze your credit with all three bureaus (it is free; see our step-by-step guide) and visit IdentityTheft.gov for a recovery plan. Our identity theft guide walks through it. |
| Sent money | Call your bank or payment app immediately. Ask for a recall of the transfer. Speed matters, as a quick call can sometimes stop it. Then file reports with the FTC and, for larger losses, the FBI at ic3.gov. |
| Let someone control your computer remotely | Turn off the computer and disconnect from Wi-Fi, then get help from a trusted repair service. Change passwords from a different device. |
How to report a scam text
- Forward it to 7726 (SPAM). That is the number carriers use to track and block scam texts. You will get a reply asking for the sender’s number.
- Use your phone’s report button. On iPhone, tap “Report Junk” under the message. On Android Messages, open the message menu and choose “Report spam.”
- Report to the FTC at ReportFraud.ftc.gov. It helps investigators spot patterns, even if your money is not recovered.
- Tell the company being imitated. USPS, banks and retailers all have spoofing report addresses on their websites.
One more tip: do not reply “STOP” to a text from a number you do not know. For a legitimate business, STOP works. For a scammer, any reply tells them your number is live, and they may send even more.
How to make scam texts stop reaching you
- Filter unknown senders. On iPhone, go to Settings, Messages, and turn on “Filter Unknown Senders.” On Android, open Messages settings and enable spam protection.
- Block and delete. Block the number after you report it. It only takes a few seconds.
- Stay off lists. Data brokers sell phone numbers. Our guide to removing your personal info from data brokers cuts down the source.
- Stop the calls too. Scammers who text often call. Use the free setup in our robocall guide.
- Turn on two-factor authentication for your email, bank and phone carrier account, so a stolen password alone does not open the door.
How to protect older family members
Older adults are frequent targets, partly because scammers assume they have savings. But the fix is not lecturing. Sit down together and set up the phone filters above. Agree on a family code word. And tell them plainly: “If any message makes you nervous, call me first. You will never be in trouble for asking.”
If a parent has already lost money, treat it like the crime that it is. Contact the bank, report it, and avoid blame. People who feel judged hide losses, and hidden losses grow.
Frequently asked questions
Can I get scammed just by receiving a text?
Just receiving and reading a text is very unlikely to hurt you. The danger starts when you tap a link, open an attachment, reply with details or call a number in the message.
Is it safe to reply “STOP” to a scam text?
No. With unknown senders, replying can confirm your number is active. Report and block instead.
How can I tell if a text from my bank is real?
Real banks do text about fraud alerts and codes, but they will never ask for your full password, PIN or a one-time code. If you are unsure, call the number on your card.
Can I get my money back?
Sometimes. Credit card charges are the easiest to dispute (see our guide to winning a card dispute). Wire transfers and gift cards are much harder. That is why speed matters.
Why am I getting so many scam texts lately?
Criminals now send them by the million using cheap software. A phone number leaked in one data breach can reach hundreds of scammers. It is not a sign that you did anything wrong.
The bottom line
Linda deleted the toll text, reported it to 7726 and changed one habit: she no longer taps links in messages from anyone she does not recognize. That is the most useful rule you can adopt. If a message matters, a real company will still be there when you open their app.
Share this article with one person you care about. A two-minute conversation today can save someone from a loss that takes years to recover from.
This article is general information and not legal advice. Statistics are from the Federal Trade Commission’s reports on fraud for 2024. If you have been defrauded, report it to your bank, the FTC and local law enforcement.
