Text message scams — also called smishing — are growing faster than any other category of fraud. The FTC received over 400,000 reports of scam text messages in 2025, with reported losses exceeding $470 million. If you have received a suspicious text and you are wondering "Is this text message a scam?" — here is exactly how to find out.
The Fastest Way to Check
Copy the full text of the suspicious message. Go to IsThisAScam.to. Paste it. You will get an instant verdict with a detailed analysis of the message content, any links it contains, and whether it matches known scam patterns. It is free, takes under 10 seconds, and requires no signup.
Received a suspicious message?
Paste the message here for instant analysis.
No signup · 6 detection layers · Results in seconds · Cmd+Enter
7 Signs a Text Message Is a Scam
1. It Contains a Link You Did Not Request
The most common scam text pattern: an unsolicited message with a link. "Your package is waiting — confirm delivery: [link]." "Your bank account has been locked — verify here: [link]." If you did not initiate the interaction that would generate this text, the link is almost certainly malicious.
2. It Creates Artificial Urgency
"Act within 24 hours or your account will be closed." "Last chance to claim your refund." Scammers use urgency to prevent you from thinking critically. Real companies send reminders over days or weeks — not ultimatums via text.
3. It Comes from a Random Phone Number
Legitimate companies use shortcodes (5-6 digit numbers) or verified sender IDs for text messages. If a message claiming to be from your bank comes from a regular 10-digit phone number — especially one from an area code you do not recognize — it is suspicious.
4. It Asks for Personal Information
No legitimate company asks you to reply to a text with your password, Social Security number, account number, or verification code. If a text asks for any of this, it is a scam.
5. It Mentions Money You Did Not Expect
"You've won a $500 gift card." "Your tax refund of $3,200 is ready." "You have a pending payment of $1,847." Unexpected money — whether owed to you or charged to you — is the bait in most text scams.
6. The Link Domain Looks Wrong
Even without clicking, you can often see part of the URL in the message. If a USPS notification links to usps-redelivery84.com instead of usps.com, that is a fake. Real companies use their primary domain for all communications.
7. You Cannot Verify It Through the Official App
If a text claims there is an issue with your Amazon order, open the Amazon app directly and check. If a text says your bank detected fraud, open your banking app and look. If there is no corresponding alert in the official app or website, the text is a scam.
Most Common Text Message Scams in 2026
Package Delivery Scams
Fake notifications from USPS, FedEx, UPS, or Amazon claiming a package could not be delivered. The link leads to a page that asks for your address and a credit card to pay a "redelivery fee." Neither USPS nor any major carrier charges redelivery fees or requests payment via text.
Bank Fraud Alert Scams
"[Bank Name] Alert: Suspicious activity detected on your account. If this was not you, visit [link] to secure your account." These texts mimic real fraud alerts but direct you to a phishing page that captures your login credentials.
Government Impersonation Scams
Texts claiming to be from the IRS, Social Security Administration, or DMV. The IRS does not initiate contact by text message. Neither does the SSA. If you receive a text from a government agency, it is a scam.
Toll and Fine Scams
"You have an unpaid toll of $4.35. Pay now to avoid a $50 late fee: [link]." These exploit the fact that many people use toll roads and might believe they missed a payment. Real toll authorities send bills by mail.
"Wrong Number" Romance Scams
"Hey, are you still coming to dinner tonight?" or "Is this Jessica?" These are not wrong numbers. They are the opening move in a long-term scam designed to build a relationship and eventually ask for money or investment in a fake crypto platform. This is known as pig butchering.
What to Do If You Already Clicked a Link
- Do not enter any information. If you clicked but did not fill out any forms, the risk is lower. Close the page immediately.
- If you entered login credentials, change the password for that account immediately from a different device. Enable two-factor authentication if it is not already on.
- If you entered payment information, contact your bank or credit card company immediately to report the compromise and request a new card number.
- Run a security scan on your phone. On Android, check for any apps you did not install — some phishing pages prompt malware downloads. On iPhone, the risk of malware from a web link is lower, but you should still check for any unfamiliar configuration profiles in Settings > General > VPN & Device Management.
- Monitor your accounts for unauthorized activity over the next 30 days.
How to Report Scam Texts
- Forward the text to 7726 (SPAM). This works on all major US carriers and helps them block the sender.
- Report to the FTC at ReportFraud.ftc.gov.
- Report to your carrier. AT&T, Verizon, and T-Mobile all have online reporting forms for spam texts.
- Block the number on your phone to prevent further messages from the same sender.
Before you delete the next suspicious text, paste it into IsThisAScam.to and contribute to the community database. Every report makes the detection system smarter for everyone.