Fake Text Messages: How to Spot and Handle Them

Fake text messages are SMS or messaging-app messages designed to mislead you, often by impersonating a delivery company, bank, government agency, or someone you know. They may try to steal login details or money, install malicious software, or simply confirm that your number is active; treat unexpected requests and links with caution.

What counts as a fake text?

A fake text can be a mass scam sent to thousands of people or a carefully targeted message written for one recipient. Common examples include a notice about an unpaid toll, a parcel that cannot be delivered, suspicious activity on an account, a prize you did not enter to win, or a relative supposedly needing urgent help.

Some messages are “smishing”—a blend of SMS and phishing. The goal is often to get you to tap a link and enter credentials or payment details on a counterfeit website. Other messages ask you to reply, call a number, share a one-time verification code, or transfer money. A message can also be fake even when it contains your name or other accurate details.

How fake texts work

Scammers use several methods to make a text seem genuine. They may imitate an organization’s name, copy its writing style, or create urgency so you act before checking. A link can use a look-alike address, a shortened URL, or a misleading display name. The page it opens may resemble a real sign-in screen but send the information you enter to the scammer.

The sender information itself is not reliable proof. Caller ID and text sender names can sometimes be spoofed, so a familiar number or organization name does not establish who sent the message. Scammers may also use ordinary numbers, automated messaging services, or compromised accounts. A message appearing in a conversation thread with authentic messages is not conclusive proof that it is genuine.

Not every unexpected text is a scam. A real organization may send an appointment reminder or delivery update. The safer test is to verify the claim through a separate route you already trust, not through the link or phone number in the message.

Warning signs to look for

Look at the request and circumstances, not just spelling. Poor grammar can be a clue, but polished writing is easy to produce and does not prove legitimacy. Warning signs include:

An unexpected demand to pay, confirm personal information, or sign in through a link.
Pressure to act immediately, threats of account closure, or promises of a reward that seems unearned.
A request for a password, payment-card information, identity details, or a one-time security code.
A web address that is shortened, misspelled, oddly structured, or unrelated to the organization it claims to represent.
Instructions to move a conversation to another app, keep it secret, or pay using an unusual method.
A supposed friend or relative using a new number and asking for money without confirming their identity.

Be especially careful with verification codes: legitimate services may send them to you, but you should not give a code to a person who contacts you. A code can authorize a sign-in or account change.

What to do when a suspicious text arrives

Do not tap, reply, or call the number in the message. Replying can confirm that your number is monitored, and a link may lead to a deceptive page. Avoid downloading attachments or installing apps prompted by the text.
Check independently. Open the organization’s official app or type its known website address yourself. For a delivery, bank, or government notice, check your account or contact the organization using contact details from a trusted source. For a message from someone you know, call them on a number you already have.
Report and block it. Use the reporting and blocking controls in your messaging app or phone. In the United States, many carriers accept suspected spam forwarded to 7726 (SPAM); availability and procedures differ elsewhere. You can also report impersonation to the organization being copied and use your country’s official consumer-protection or cybercrime reporting service.
Delete it after reporting. Do not keep interacting with the sender. If you need evidence for a report, save a screenshot first, taking care not to share sensitive information publicly.

Reporting options vary by phone, messaging service, carrier, and country. A built-in spam report may send the message and related sender details to the service provider for review; it does not guarantee that every similar text will be blocked.

If you already clicked or responded

The next step depends on what happened. If you opened a link but did not enter information, close the page and do not download anything. A click alone does not prove that your device or account was compromised, but be alert for unexpected sign-in alerts or follow-up messages.

If you entered a password, go directly to the real service and change it. If you reused that password elsewhere, change it on those accounts too, using distinct passwords. Review recent account activity and sign out other sessions if the service provides that option. Turn on multifactor authentication where available. If you shared a one-time code, contact the service promptly through its official support channel and secure the account.

If you gave payment details or sent money, contact your bank, card issuer, or payment provider using its official number or app as soon as possible. Explain what information was shared or what transaction occurred and follow its instructions. If you installed an app or file, remove it if appropriate, review the device’s security settings, and use reputable security support. Do not pay someone who contacts you claiming they can recover money for an upfront fee.

Reducing future risk

Keep your phone’s operating system and apps updated, since updates can include security fixes. Use a screen lock and account-specific passwords, and enable multifactor authentication where practical. Spam-filtering features can reduce unwanted messages, but they are not perfect: legitimate texts may be filtered, and some scams may get through.

Limit personal details you post publicly. Scammers can use public information to make a message sound convincing, but a personalized greeting still does not authenticate the sender. Make a habit of pausing when a text creates urgency, then verify the request outside the conversation.

Frequently Asked Questions

Can a fake text come from a real phone number?
Yes. Sender details may be spoofed, and a real person’s account or number could also be misused. Do not rely on the displayed number alone; verify unexpected requests through a separate trusted channel.

Is it safe to reply “STOP” to a suspicious text?
Only use “STOP” when you are confident the message is from a legitimate service you signed up to receive. Replying to an unknown scam message may confirm that your number is active. Report and block suspicious messages instead.

Can opening a text message infect my phone?
Simply viewing a standard text is generally different from tapping a link, opening an attachment, or installing an app. Keep your device updated, avoid suspicious links and downloads, and seek device-specific support if you notice unusual behavior.

How can I check whether a delivery text is real?
Do not use its link or callback number. Open the delivery company’s official app or website independently and check tracking there, using a tracking number from an order confirmation you trust.

Should I delete a fake text?
After reporting it, you can delete it. If you are making a formal report or need to explain what happened to your provider, keep a screenshot or other relevant details first and avoid posting private information publicly.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →