In-depth guide

How to recognize any text scam (2026 guide)

Text-message scams (smishing) now account for more than half of all reported US fraud attempts. The volume is overwhelming — but the patterns are remarkably consistent. Learn to spot the universal red flags once, and you'll never fall for them again.

The anatomy of a scam text

Every scam text follows the same basic structure. Once you can name the parts, the whole becomes obvious.

1. An urgent claim — a package, a charge, a fine, a warning. Something needs your attention now.

2. A trigger of fear, greed, or duty — losing access, missing a refund, getting arrested, helping family.

3. A frictionless action — tap a link, call a number, send a reply. Easy, immediate, deceptively low-stakes.

4. A deadline — 12 hours, 24 hours, 'final notice.' The deadline forces you past your normal verification habits.

Every scam text has these four elements. The brand changes (USPS, Amazon, your bank), but the structure doesn't.

The 6 most common text scam categories

1. Package delivery. 'USPS / FedEx / UPS — your package is held, pay $1.99.' Highest volume of all text scams. The small fee captures your card details. See: USPS, FedEx, UPS.

2. Bank fraud alerts. 'Did you charge $487 at Best Buy? Call this number to dispute.' Real bank alerts ask for YES/NO reply only — never callbacks. See: Chase, Wells Fargo, Bank of America.

3. Account verification. 'Your Amazon / Apple / PayPal account is locked. Verify here.' Phishing for credentials. See: Amazon, Apple ID.

4. Government impersonation. IRS, DMV, Social Security, Medicare — all communicate by mail first, never by text demand. See: IRS, DMV, Medicare.

5. Payment app scams. Zelle, Venmo, Cash App — instant, irreversible. See: Zelle, Venmo, Cash App.

6. Wrong-number openers. 'Hi, sorry I think I have the wrong number, but you seem nice.' This is the front of pig butchering — a long-con investment scam. See: Pig butchering.

Universal red flags — true for every text scam

Sender is a regular 10-digit number. Real bank / delivery / government alerts come from short codes (4-6 digits) or branded sender IDs.

Link domain doesn't match the brand. Real USPS uses usps.com — not usps-redelivery.info. Real Apple uses apple.com — not apple-secure-id.com. Read the domain carefully — scammers use lookalikes.

Urgency pressure. 'Within 12 hours.' 'Final notice.' 'Account will be closed.' Real businesses give you time.

Asks for payment via gift cards, wire, or crypto. No legitimate business or government accepts these. They're scam-only payment methods because they're irreversible.

Asks you to call a number embedded in the message. Real fraud alerts use YES/NO reply. Phone numbers in texts route to scammers.

What to do — for any text you're unsure about

Don't tap the link. Just opening it can fingerprint your device and confirm your number to spammers.

Don't reply. Not even 'STOP' — replies confirm your number is active.

If you think it might be real: go to the brand's official website directly (type the domain yourself) or use their official app. Real issues will be visible there.

Forward it to 7726 (SPAM). Free on every major US carrier — your carrier investigates.

Block the sender. Delete the message.

If you already tapped the link and entered info: immediately call your bank, change passwords from a different device, place a free credit freeze at all three bureaus.

When in doubt — just check

Even if you can't identify the exact scam, the safe move is the same: don't act on the text, verify through official channels. Double Check exists exactly for the ambiguous middle ground — paste the message, get a verdict in seconds, know what to do. Free to start.

Don't memorize every scam. Just check it.

Double Check is a free app that gives you a plain-English verdict on any suspicious message in seconds. Includes automatic family alerts so loved ones stay in the loop.

Download on the App Store Get for Android