Smishing: How Scam Texts Work
'Smishing' is phishing by text message — an overview of how scam texts try to get you to click links, call numbers, or share codes, and how to spot any of them.
Think a message like this reached you? You can check it right now.
What this scam is
Smishing (SMS + phishing) is the delivery method behind a huge share of scams: a text impersonates a bank, delivery carrier, toll authority, government agency, retailer, or even a friend, and pushes you to click a link, call a number, or reply with information. Whatever the story — a package on hold, a suspicious charge, an unpaid toll, a prize — the goal is your login, card, personal data, or a payment. Recognizing the common shape of scam texts helps you spot new variants.
What it usually looks like
- An unexpected text urging you to click a link or call a number.
- A familiar brand/agency name with an odd web address.
- Urgency, threats, or too-good offers.
- A request to reply with a code or details.
Common warning signs
- Links in texts from numbers you don't know.
- Urgency and pressure to act now.
- Requests for logins, codes, card, or payment.
- Slightly-off web addresses and generic greetings.
Example wording scammers use
“Your account has unusual activity — verify now: [odd link].”
“USPS: package on hold, pay a small fee: [odd link].”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- You to click, call, or reply.
- Your credentials, card, data, or a payment.
- To exploit trust in familiar brands.
What to do
- Don't click links or call numbers in unexpected texts.
- Verify by opening the official app or typing the real address yourself.
- Never reply with codes, logins, or card details.
- Delete and report spam texts (forward to 7726/SPAM); block the sender.
What to do if you already responded
- Change any password/code you shared and contact the affected company.
- Call your card issuer if you shared card details.
- Report at reportfraud.ftc.gov.