How to Tell If a Text Message Is a Scam (Smishing Guide)
Received a suspicious text? Learn the warning signs of SMS scams (smishing), how to verify any message, and what to do if you've already responded.
Text message scams — known as smishing — have overtaken email as the most common form of phishing attack. Unlike email spam which most people now ignore, text messages feel personal and urgent. They arrive on the same device where you receive messages from family and friends, which lowers your guard. This guide teaches you exactly how to identify scam texts before you fall for them.
What makes text scams so effective
Text messages have a 98% open rate compared to about 20% for emails. Scammers know this. They also know that:
- People check texts within 3 minutes on average
- Texts feel more personal and trustworthy than emails
- Small screens make it harder to spot suspicious URLs
- Sender IDs can be spoofed to show a bank name or government agency
These factors combine to make smishing extremely effective — and extremely profitable for criminals.
The 8 warning signs of a scam text
1. You weren't expecting it The single most reliable indicator. A text about a package you didn't order, a prize you didn't enter, or fraud on an account you don't have is almost certainly a scam.
2. It creates urgency or fear "Your account will be suspended in 24 hours." "Immediate action required." "Your parcel will be returned if you don't confirm." These phrases are designed to make you panic and act without thinking. Legitimate organisations give you time to respond.
3. It contains a link Legitimate banks and government agencies generally don't send you links via SMS asking you to log in. If a message contains a link, treat it with extreme suspicion — especially if it's a shortened URL you can't read.
4. It asks for sensitive information No legitimate organisation will ever ask you to reply with your password, PIN, OTP, full card number, or social security number via text message. Ever.
5. The sender number looks odd Watch for very long numbers, international numbers you weren't expecting, or numbers starting with unusual country codes. Note that sender ID spoofing means this check alone is not sufficient — scam texts can appear to come from "DBS" or "HMRC" as the sender name.
6. Poor spelling or grammar Many scam operations originate overseas and the messages are translated or written by non-native speakers. Unusual phrasing, missing words, or obvious errors are red flags.
7. Generic greeting Legitimate companies that message you know who you are. "Dear Customer" or "Dear User" instead of your actual name suggests a mass-sent scam message.
8. The offer is too good to be true "You've won $5,000." "Claim your free iPhone." "You are selected for a government relief payment." If it sounds too good to be true, it is.
Common scam text templates to recognise
Parcel delivery scam "Your parcel could not be delivered. Please confirm your address and pay a small customs fee: [link]" — Postal services don't charge fees via SMS links. Go directly to the carrier's official website.
Bank fraud alert scam "[Bank Name]: We've detected suspicious activity on your account. Please verify immediately: [link]" — Call your bank on the number on the back of your card. Never use the link.
Government payment scam "You are eligible for a tax rebate / government support payment. Click here to claim: [link]" — Government agencies send official letters, not SMS links for payments.
Account verification scam "Your [Netflix/PayPal/Amazon] account has been suspended. Update your payment details: [link]" — Log in directly on the official website or app. Never via a link in a text.
OTP request scam "Your verification code is XXXXXX. Never share this with anyone." — followed immediately by a call asking you to "confirm" the code. — This is a real-time account takeover. The criminal has already started logging into your account and needs your OTP to complete it. Never share OTPs.
Investment opportunity scam "I found an amazing investment that gave me 300% returns. Join our group: [link]" — These lead to investment fraud platforms that steal your deposit.
How to verify a suspicious text
Step 1 — Don't click any links in the message
Step 2 — Paste the message text into Scampede's message checker — our AI analysis will identify scam patterns instantly
Step 3 — Search the sender number on Google with the word "scam"
Step 4 — Contact the supposed sender directly using a number you find independently — not from the text. Call your bank's official hotline, check the company's official website, or visit a physical location
Step 5 — Check official sources — if the text claims to be from a government agency, check that agency's official website directly for any alerts about the message type
What to do if you already responded
If you clicked a link but didn't enter information:
- Close the browser tab immediately
- Run a security scan on your device
- Change passwords for any accounts you access on that device as a precaution
If you entered login credentials:
- Change your password immediately on that account
- Change it on every other account where you use the same password
- Enable two-factor authentication
- Check for unauthorised activity
If you shared an OTP or verification code:
- The criminal may have already accessed your account — check immediately
- Contact your bank or the relevant service's fraud team right now
- Request account security review and any recent transactions to be reversed
If you transferred money:
- Contact your bank immediately — you may have a narrow window to recall the transfer
- File a police report — this creates an official record needed for any recovery process
- Report to your national scam authority
How to protect yourself going forward
- Never click links in unexpected texts — always go directly to the official website or app
- Enable spam filtering — iOS and Android both have built-in SMS spam detection in settings
- Install ScamShield (Singapore users) — it automatically blocks known scam numbers
- Use Truecaller — identifies and blocks scam calls and texts based on community reports
- Report scam texts — forward them to your carrier's spam number (7726 in many countries) and report on Scampede
Every scam text you report makes the next person safer.
FAQ
Smishing is SMS phishing — scam text messages designed to trick you into clicking a link, calling a number, or revealing personal information.
Paste the message text into Scampede's message checker. Also look for urgency language, unexpected links, requests for OTPs or passwords, and sender numbers you don't recognise.
Yes. Scammers can spoof sender IDs to make messages appear to come from your bank or a government agency.
Don't enter any information on the page that loaded. Close it immediately, change any passwords you may have entered, and contact your bank if you shared financial details.