How to Tell If a Text Message Is a Scam (Smishing Guide)
Received a suspicious text? Learn the warning signs of SMS scams (smishing), how to verify any message, and what to do if you've already responded.
Text message scams — known as smishing — have overtaken email as the most common form of phishing attack. Unlike email spam which most people now ignore, text messages feel personal and urgent. They arrive on the same device where you receive messages from family and friends, which lowers your guard. This guide teaches you exactly how to identify scam texts before you fall for them.
What makes text scams so effective
Text messages have a 98% open rate compared to about 20% for emails. Scammers know this. They also know that:
- People check texts within 3 minutes on average
- Texts feel more personal and trustworthy than emails
- Small screens make it harder to spot suspicious URLs
- Sender IDs can be spoofed to show a bank name or government agency
These factors combine to make smishing extremely effective — and extremely profitable for criminals.
The 8 warning signs of a scam text
1. You weren't expecting it The single most reliable indicator. A text about a package you didn't order, a prize you didn't enter, or fraud on an account you don't have is almost certainly a scam.
2. It creates urgency or fear "Your account will be suspended in 24 hours." "Immediate action required." "Your parcel will be returned if you don't confirm." These phrases are designed to make you panic and act without thinking. Legitimate organisations give you time to respond.
3. It contains a link Legitimate banks and government agencies generally don't send you links via SMS asking you to log in. If a message contains a link, treat it with extreme suspicion — especially if it's a shortened URL you can't read.
4. It asks for sensitive information No legitimate organisation will ever ask you to reply with your password, PIN, OTP, full card number, or social security number via text message. Ever.
5. The sender number looks odd Watch for very long numbers, international numbers you weren't expecting, or numbers starting with unusual country codes. Note that sender ID spoofing means this check alone is not sufficient — scam texts can appear to come from "DBS" or "HMRC" as the sender name.
6. Poor spelling or grammar Many scam operations originate overseas and the messages are translated or written by non-native speakers. Unusual phrasing, missing words, or obvious errors are red flags.
7. Generic greeting Legitimate companies that message you know who you are. "Dear Customer" or "Dear User" instead of your actual name suggests a mass-sent scam message.
8. The offer is too good to be true "You've won $5,000." "Claim your free iPhone." "You are selected for a government relief payment." If it sounds too good to be true, it is.
Common scam text templates to recognise
Parcel delivery scam "Your parcel could not be delivered. Please confirm your address and pay a small customs fee: [link]" — Postal services don't charge fees via SMS links. Go directly to the carrier's official website.
FAQ
Smishing is SMS phishing — scam text messages designed to trick you into clicking a link, calling a number, or revealing personal information.
Paste the message text into Scampede's message checker. Also look for urgency language, unexpected links, requests for OTPs or passwords, and sender numbers you don't recognise.
Yes. Scammers can spoof sender IDs to make messages appear to come from your bank or a government agency.
Don't enter any information on the page that loaded. Close it immediately, change any passwords you may have entered, and contact your bank if you shared financial details.