Tools · Listicle

9 Signs a Text Message Is a Scam (Check Before You Click)

Direct answer first: nearly every scam text, the fake delivery notice, the locked bank account, the stranded relative, leans on the same small set of tells, and once you can name them, the messages stop working on you. Here are the nine signs that cover almost everything currently landing in inboxes, what to do instead of clicking, and a free way to check any message in seconds. One disclosure up front: the checker linked at the end is mine, and this list is the thinking it runs on.

1. It creates urgency out of nowhere

Scam texts manufacture a countdown: your package will be returned today, your account closes in 24 hours, your card is locked right now. Real organizations almost never demand action within minutes by SMS. Urgency exists to stop you thinking, which is exactly why the right first move is the opposite: slow down, and check the message before touching anything in it.

2. The link does not match the sender

A delivery text pointing at a shortened link, a misspelled domain, or a long address with the real brand buried in the middle is the single most reliable tell. Read links from the right: the part just before the first slash is the actual destination. If a text claims to be your bank and the domain is anything other than your bank's, you are done evaluating.

3. It asks you to 'verify' information they should already have

Your bank knows your account number. The postal service does not need your card details to deliver a package that already has postage. Any message asking you to re-enter credentials, card numbers, or personal details through a texted link is working a script, not a service.

4. 'Hi Mom' from a number you don't recognize

The family-emergency text, a child on a new number, a relative stranded, a friend who urgently needs a transfer, is one of the most profitable scams running because it borrows your love and your hurry. The counter is boring and bulletproof: contact the real person on the number you already have. Real emergencies survive a verification call.

5. A payment method that cannot be reversed

Gift cards, wire transfers, crypto, and payment apps set to friends-and-family all share one property: the money does not come back. The moment any text steers you toward an irreversible payment method, the conversation is over. No legitimate bill, fine, or fee is payable exclusively in gift cards. None.

6. A 'bank code' you did not request

If a login code arrives without you logging in, someone else is trying your account, and the follow-up call claiming to be the bank, asking you to read that code aloud, is the scam's second half. Codes are for entering into sites yourself, never for reading to a human on the phone, no matter who they claim to be.

7. Grammar that is almost right

Modern scam texts are not the typo-riddled mess of a decade ago, AI cleaned them up, but the tells moved rather than vanished: slightly wrong names for institutions, odd spacing, formal phrasing where a real service writes casually, or your full legal name where your bank uses your first name. Almost-right is its own warning sign now.

8. It arrived out of the blue about money, prizes, or problems

You did not enter the lottery it says you won. You were not expecting the refund it offers or the invoice it attaches. Unprompted messages about money, in either direction, carry a burden of proof that a text message can never meet. Treat out-of-the-blue as guilty until verified through a channel you chose.

9. Something just feels off

Trust the hum. The message that is almost normal, the request that is slightly unusual, the tone that does not quite match the sender, your pattern-matching noticed something before you could name it. That instinct deserves thirty seconds of checking, which is precisely the gap my Scammer Checker exists to fill: paste the message, and get the warning signs spelled out in plain English with practical next steps. It is free, needs no account, and nothing you paste ever leaves your browser, it checks against a published set of sourced rules right on your device. Disclosure: I built it, and I built it because this list should not have to live in anyone's memory.

What to do instead of clicking

The playbook is short. Do not click, reply, or call the number in the message, every path inside a scam text leads somewhere bad, including the "reply STOP" that confirms your number is live. Verify through a channel you already trust: the app you already have installed, the number on the back of your card, the person's real contact. Check the message itself with a tool like Scammer Checker when something feels off but you cannot say why. And if you already clicked or paid, move fast rather than quietly: contact your bank, change the relevant passwords, and report it, speed matters far more than embarrassment, and the site's "already acted?" guide walks through exactly that worst-case path step by step.

One more thing worth doing this week: send this list, or the checker, to the person in your family most likely to get caught. Scam texts are a volume business aimed at whoever answers, and the people who lose the most are rarely the people reading articles like this one. The free, printable family guide on the site exists for exactly that conversation.

Scams evolve, the signs barely do. Urgency, mismatched links, irreversible payments, and borrowed trust have powered every generation of this fraud from fake princes to fake delivery vans, and they will power the next one too, whatever channel it arrives on. Learn the nine once, check when the hum starts, send the list to the people you love, and the whole category quietly stops working on your family. That is the entire ambition of this page.

The three scams these signs catch most often right now

Worth seeing how the tells stack in the wild, because real scam texts rarely show one sign, they show three or four at once. The fake delivery notice is signs one, two, and three in a trench coat: urgency (your package returns today), a link that does not match any carrier, and a form asking for card details to cover a fee that real logistics companies do not collect by text. The bank impersonation runs signs one, two, and six: an alarming account alert, a lookalike domain, and, in the nastier version, a follow-up call asking you to read back the login code that just arrived, which is the one thing no bank employee will ever request. And the family-emergency message is sign four powered by sign five: a loved one on a strange number who needs money through a method that cannot be reversed, with a story engineered to make verification feel heartless. It never is. Verify anyway.

The stacking is also your confidence meter. One sign deserves suspicion and a check; two or more is a verdict, and you can stop analyzing and delete. One more step worth the ten seconds: report what you catch. In the US you can forward scam texts to 7726 (SPAM), which helps carriers block the number for everyone behind you, and losses or attempts can be reported to the FTC and, for larger frauds, the FBI's IC3. Reporting feels pointless from inside one inbox; in aggregate it is how the blocklists get built. And if you are the designated tech person for older relatives, forward them the checker before the next fake delivery text arrives, prevention beats consolation by an enormous margin. That is really why a written list beats memory and why I eventually turned this one into software: under urgency, nobody runs through nine bullet points, which is the exact weakness the scripts are built to exploit. A checker holds the list so your adrenaline does not have to, and the thirty seconds it takes is thirty seconds the scam cannot survive.

FAQ

How can I check if a text is a scam without clicking the link?

Verify through a channel you already trust (your bank's app, the official website typed by hand, the person's known number), and run the message through a checker like Scammer Checker, which matches it against published, sourced warning-sign rules entirely in your browser, free, no account, nothing uploaded.

What should I do if I already clicked a scam link or paid?

Act fast: contact your bank or card issuer immediately, change the passwords involved (and anywhere they are reused), enable two-factor authentication, and report the scam. Recovery odds depend heavily on speed and payment method, which is why reversible methods matter so much.

Why do scammers ask for gift cards?

Because gift card payments are effectively irreversible and hard to trace. No legitimate business, government agency, or utility accepts fines or bills in gift cards. The request itself is proof of a scam.