How to Spot a Fake Text Message (Smishing Scam)

Scam texts cost Americans $470 million in 2024. Learn how to recognize a fake text before you tap any links.

3 min read · 6 steps · Checked April 2026

1. Step 1. Know what a smishing scam looks like

   Smishing is when a scammer sends a text pretending to be a real company — like FedEx, your bank, Amazon, USPS, or even the IRS. The goal is to get you to tap a link and enter your personal information or pay money.

   Quick Tip

   The FTC says text scams hit a record $470 million in losses in 2024. Seniors are the most targeted group. Learn more at consumer.ftc.gov/articles/how-recognize-report-spam-text-messages

2. Step 2. Look for these red flags

   Watch out for: urgency ("Your account will be closed in 24 hours!"), strange sender numbers or email addresses, links with odd web addresses (like "usps-delivery.net" instead of usps.com), requests for gift cards or wire transfers, and unexpected prizes or refunds.

   Warning

   Real companies like FedEx, UPS, Amazon, and your bank will NEVER ask you to pay with gift cards or send them money by text message.

3. Step 3. Never tap links in unexpected texts

   If you get a text about a package, an account problem, or a payment — do not tap the link. Instead, open your web browser and type the company's real website address yourself (like fedex.com or amazon.com) to check your account directly.

4. Step 4. Check the sender carefully

   Legitimate companies usually send texts from short 5-6 digit numbers called "short codes" (like 22395 for USPS). If you get a long phone number claiming to be a big company, that's a warning sign. Scammers also send texts from email addresses or random international numbers.

5. Step 5. Forward spam texts to 7726

   Forward any suspicious text message to 7726 (which spells SPAM on your keypad). It's free on all US carriers. This reports the scam to your carrier so they can block it for other customers.

   Quick Tip

   You can also report text scams directly to the FTC at ReportFraud.ftc.gov. It takes less than 2 minutes.

6. Step 6. What to do if you already tapped a link

   If you tapped a scam link: do not enter any personal information. Close the browser right away. If you entered a password, change it right away. If you entered a credit card number, call your bank and report it. Run a security scan on your phone.

   Warning

   Contact your bank right away if you entered any payment information. Many banks can reverse unauthorized charges if you report them quickly.