Scam Text Messages (Smishing): How to Spot and Report Fake SMS
Scam text messages (smishing) are rising fast. Learn the most common fake SMS scams, the warning signs, how to handle a suspicious text, and how to report it.
Scam Text Messages (Smishing): How to Spot and Report Fake SMS
Scam text messages — known as "smishing" (SMS phishing) — are fake SMS or messaging-app messages designed to get you to click a link, call a number, or share information. Texts feel more personal than email, which is why smishing is rising fast in the US and Canada.
Common scam text messages
1. Fake package delivery
"USPS: your package is on hold. Pay $1.99 to reschedule delivery." The link goes to a phishing page or installs malware. You didn't order anything, or the courier name is misspelled. See delivery/courier scams.
2. Fake bank or payment alert
"Your account is locked. Verify here." The link is phishing. See PayPal scam, Apple Pay scam.
3. Unexpected verification codes
A code you didn't request — someone may be trying to use your number. See Uber code text scam.
4. Prize and refund lures
"You've won! Claim your prize." See gift card scam.
5. Government or toll scams
"You have an unpaid toll. Pay to avoid penalties." Government agencies don't text payment demands with odd links.
6. Job and task scams
"Earn $500/day from your phone." See job scams.
Warning signs
- A link you weren't expecting.
- Urgency — "act now," "final notice."
- A misspelled sender or brand name.
- A request for payment, codes, or personal details.
- A "delivery" or "toll" message for something you don't recognize.
How to handle a suspicious text
- Don't click the link. Press and hold to preview the URL first.
- Don't reply — even "STOP" can confirm your number is active.
- Verify independently — open the real app or website yourself.
- Report the text — in the US, forward to 7726 (SPAM); in Canada, forward to 7726 as well.
- Check the message with the GoCheckAI checker for a risk score.
How to protect yourself
- Enable your phone's spam-filtering (silence unknown senders on iPhone, spam protection on Android).
- Never enter details after clicking a text link — go to the official site.
- Never share OTPs sent by text with anyone.
- Be extra cautious of any text containing a link.
If you clicked or shared details
- If you entered a password, change it and enable 2FA.
- If you entered card details, freeze your card and call your bank.
- If you installed an app, uninstall it and run a security scan.
- Report to the FTC (US) or CAFC (Canada). See country guides.
Get a personalized action plan and read what to do if you've been scammed and phishing scam.
Related guides
Important
This article is for general informational purposes only and is not legal, financial, or professional advice. GoCheckAI is an independent platform and is not affiliated with any government agency. Always report crime to official authorities in your country.
High Risk of Recovery Scam
Scam victims are often targeted again by fake “recovery agents.”
- Anyone claiming “We can recover your money for a small upfront fee” is almost certainly a scammer.
- Recovery is never guaranteed. No legitimate service charges an upfront fee to retrieve stolen funds.
- Scammers buy victim lists — expect fake “hackers”, “officials”, and “lawyers” to contact you.