How-to guide

How to spot a scam text message

Smishing — phishing by SMS — is the fastest-growing scam channel. The texts copy banks, couriers, the DMV, toll agencies, and brands like Coinbase or Amazon to make you panic and tap a link. Here is how to recognize one in five seconds.

Check something suspicious now

Check this now →

Get a clear Stop / Verify / Continue verdict from Scam Doctor. Free check, no signup.

The anatomy of a scam text

Almost every scam text has the same three ingredients. Once you see the pattern, they are easy to catch:

  • Urgency — "account suspended", "final notice", "package on hold", "pay within 12 hours".
  • A link — to "verify", "pay a small fee", "reschedule delivery", or "confirm details".
  • A request — for a code, password, card number, or payment.

Red flags to check

If a text shows any of these, treat it as a scam until proven otherwise:

  • A link whose domain is not the company's real website (look-alikes, extra words, .xyz/.top endings).
  • A "fee" to release a package or avoid a fine — real couriers and agencies don't text pay-now links.
  • A sender that's a random mobile number rather than the company's real shortcode.
  • A message about an account or delivery you weren't expecting.

What to do

Don't tap the link. Open the company's official app or type its address yourself. Forward the text to 7726 (SPAM) so your carrier can block the sender, then delete it. If you already tapped or entered details, change that password and contact your bank.

Frequently asked questions

How do I check if a text is a scam?

Don't tap the link. Paste the message into Scam Doctor for an instant Stop / Verify / Continue verdict, or open the company's official app to confirm.

What happens if I click a scam text link?

It may load a fake login page or trigger a download. Don't enter anything. If you already did, change your password and contact your bank immediately.

Should I reply STOP to a scam text?

No — replying confirms your number is active. Forward it to 7726 and delete it instead.

More from the blog