How to Spot a Scam Text Message
The scam text, smishing, is the fake toll bill, the parcel "held" for a small fee, the bank "fraud alert" that is itself the fraud. This guide is for anyone with a phone. It explains why texts are such an effective delivery method, the specific scams flooding inboxes right now, the red flags that give them away, and what to do if you already clicked or replied.
How we check this: Reflects how the FTC, FCC, and USPS describe SMS phishing (smishing) campaigns targeting consumers. · Last reviewed: 2026-08
Why scam texts work so well
A text feels urgent and personal in a way email does not. It lands on the device you check dozens of times a day, the screen is small so links are hard to inspect, and we are used to tapping quickly. Smishing exploits all of that. The messages are cheap to send by the million, and they only need a small fraction of recipients to tap once.
The stories are chosen because they apply to almost everyone. Nearly everyone is expecting a package, has driven on a toll road, or has a bank account. That broad relevance is what makes a random text feel like it might genuinely be yours.
The texts flooding phones right now
The unpaid-toll text claims you owe a small toll and threaten late fees or a suspended registration unless you pay through a link. The number is tiny by design, small enough that people pay to make it go away rather than check. It is a scam; toll agencies do not collect this way by surprise text.
The parcel scam says a package is held and needs a small redelivery fee or an address confirmation. The link leads to a page that harvests your card details and personal information. Real carriers do not hold packages for a few dollars collected by text link.
The bank "fraud alert" is the most dangerous because it inverts your defenses. It warns of suspicious activity and urges you to call a number or click a link to "secure" your account, where a fake agent or page then extracts your login, your card, or a verification code. The alert is the attack.
The red flags in a scam text
The link rarely matches the sender it claims to be. A real toll agency, carrier, or bank uses its own clean domain; scam texts use random strings, lookalike spellings, or link shorteners that hide the real destination. On a phone this is easy to miss, which is exactly why it works.
The amount or action is small and urgent. A tiny fee, a quick confirmation, a short deadline, all designed to get a fast tap before you think. Legitimate bills and delivery notices do not demand instant payment through an unfamiliar link to avoid a penalty.
The sender looks off. Texts from odd long numbers, email-style addresses, or overseas codes claiming to be a domestic agency or your bank are a giveaway. And remember: banks and agencies will not ask you to send a payment, log in, or read back a verification code from a link in a text.
More smishing storylines to know
Beyond tolls, parcels, and bank alerts, a few more text storylines are worth recognizing on sight. The prize text says you have won a gift card, a phone, or cash and just need to "claim" it through a link, a link that collects your details and often a small "shipping" fee for a prize that does not exist. The government-impersonation text claims your Social Security number has been suspended or that you owe the IRS, threatening arrest unless you call or pay; real agencies do not open with threatening texts.
The "did you make this payment?" text mimics a bank's real fraud check, hoping you will call the number provided and talk to a fake agent who then extracts a verification code or moves your money "to safety." And the wrong-number text, a friendly "Hi, is this Sarah?" that turns into a chatty conversation, is often the slow opening move of a longer investment or romance scam. What ties them together is the same core signals: unexpected contact, a link or number they supply, and a push to act before you think.
You do not need to identify which specific scam a text is. If it arrived unexpectedly and wants you to tap, call, pay, or share a code, that is enough to treat it as hostile and verify independently.
If you already clicked or replied
Replying to a scam text, even just "STOP" or "who is this", confirms your number is live and can invite more messages, but on its own it does not hand over your money or accounts. If you clicked the link and entered card details or a password, that is more serious and calls for specific steps, and the sooner you act the better.
We keep the exact recovery guidance on dedicated pages so you can go straight to your situation. Do not keep engaging with the sender; block the number, and if you shared anything, act on the relevant page below.
How to handle any suspicious text
Do not tap the link, and do not pay. If the message concerns a bill, delivery, or your bank, verify it yourself: open the official app, log in to the account directly, or call the number on your card or a real statement. If a toll or package is genuinely outstanding, you will find it through the official channel, no scam text required. Then report the message (forward spam texts to 7726) and delete it.
When a text leaves you unsure, you can paste it, link and all, into Hunch, which flags the signal categories it sees, such as a lookalike domain, urgency, or a payment or credential ask. For the bank-specific version of this problem, the sibling guide below goes deeper on impersonation.
A useful mindset is to treat every unexpected text with a link as guilty until proven innocent. The cost of ignoring a rare genuine notice is small, you will still find it in the official app, while the cost of trusting one fake text can be your card details or your account. Given that lopsided trade-off, the safe default is simply to never act on a link or number that arrives in a text you did not expect.
FAQ
Is it dangerous to reply to a scam text?
Replying confirms your number is active and can lead to more scam texts, but a reply alone does not compromise your money or accounts. Don't reply, block the number and report the message instead.
Are unpaid toll and package-held texts always scams?
The versions that arrive unexpectedly and demand a small fee through a link are scams. Toll agencies and carriers do not collect small fees this way by surprise text, verify any real balance through the official app or website.
Why is the fee in these texts so small?
A small amount feels harmless and not worth checking, so people pay quickly to make it go away. The real goal is often your card and personal details, not the tiny fee itself.
How do I report a scam text?
Forward it to 7726 (SPAM) to report it to your carrier, then block the number and delete the message. If you shared any details, follow the recovery steps for what you shared.
My bank texted me about fraud, is it real?
It might be, but the safest move is to not use the text's link or number. Open your banking app or call the number on the back of your card to confirm, since the fake fraud alert is a common scam.