Suspicious Text Messages: What to Do and What Not to Click

How can you tell if a text message is suspicious?

A message can look genuine even when it is not. It may use a familiar company name, logo or writing style. It may also appear in the same conversation as real messages from an organisation.

Watch for these warning signs:

• The message is unexpected.
• It asks you to act immediately.
• It says that your account, card or service will be blocked.
• It claims that you owe money or missed a payment.
• It says that a parcel cannot be delivered.
• It offers a prize, refund or free gift.
• It asks you to click a link or scan a QR code.
• It asks for a password, PIN, card number or security code.
• The web address looks unusual or contains spelling mistakes.
• The message asks you to reply with personal information.

Even a message that looks professional should be checked before you respond or select a link.

Should you click links in text messages?

Do not click a link in an unexpected text message.

A link may take you to a fake website designed to look like your bank, a delivery company or another trusted organisation. The site may ask you to enter personal or financial information.

Some harmful links may also try to download unwanted software onto your phone. Official consumer and security guidance recommends avoiding links and attachments in unexpected messages. :contentReference[oaicite:0]{index=0}

What should you do instead of clicking the link?

Check the message using a separate, trusted method.

• Open the company’s official app yourself.
• Type the company’s usual web address into your browser.
• Call the number on the back of your bank card.
• Use a telephone number from an official letter or statement.
• Call the person who sent the message using a number already saved in your phone.

Do not use the telephone number, web address or contact details shown in the suspicious message. The FTC advises contacting the organisation using details you already know are genuine. :contentReference[oaicite:1]{index=1}

Common types of text scams

1. Delivery and parcel scams

The message says that a parcel is waiting, could not be delivered or needs a small payment before delivery.

The link may lead to a fake delivery website that asks for your name, address and card details.

Check your order through the shop or delivery company’s official app or website. Do not use the link in the message. :contentReference[oaicite:2]{index=2}

2. Bank fraud-alert scams

The message claims that a payment has been made from your account or that your card has been used.

It may ask you to reply, call a number or click a link to stop the payment.

Do not respond. Contact your bank using the number on the back of your card or through its official app.

3. Unpaid toll, fine or tax scams

The message says that you owe money for a road toll, parking fine, traffic offence or tax payment.

It may threaten extra charges or legal action if you do not pay immediately. Some recent versions include a QR code that leads to a fake payment page. :contentReference[oaicite:3]{index=3}

Check the claim directly with the relevant authority using its official website or telephone number.

4. Account or subscription scams

The message says that your streaming service, email account, Apple account or another subscription will be suspended.

It may ask you to update your payment details through a link.

Open the service’s app or website yourself and check your account there.

5. Prize, survey and refund scams

The message says that you have won a prize, qualified for a refund or can receive a free gift by completing a survey.

You may then be asked to pay a small delivery fee or enter your card details.

Do not provide payment information. Unexpected prizes and rewards are a common way to persuade people to open fraudulent links. :contentReference[oaicite:4]{index=4}

6. Wrong-number text scams

You may receive a friendly message intended for someone else, such as “Are we still meeting today?”

If you reply, the sender may try to continue the conversation and slowly gain your trust before asking for money or suggesting an investment.

Do not continue an unexpected conversation with someone you do not know.

7. Messages that appear to come from someone you know

A scammer may pretend to be a relative or friend using a new telephone number. They may say that they have lost their phone and urgently need money.

Call the person on their usual number or check with another family member before taking any action.

What information might a text scam ask for?

A fraudulent message or website may ask for:

• Your full name, address or date of birth
• Your bank account or card details
• The security code on your card
• Your password or PIN
• A one-time security code sent to your phone
• Your email login details
• A government identification number
• A photograph of an identity document
• A payment for delivery, a fine or an account problem

Phishing messages are designed to steal personal information or gain access to online accounts. Google advises never responding to unexpected requests for passwords, PINs, card numbers or other private details. :contentReference[oaicite:5]{index=5}

What should you do when you receive a suspicious text?

1. Do not click the link.
2. Do not reply. Even replying may show the sender that your number is active.
3. Do not call a number in the message.
4. Take a moment to check. Contact the company or person through a trusted channel.
5. Report the message as spam or junk.
6. Block the sender if the message is clearly fraudulent.
7. Delete the message after reporting it.

Google Messages allows users to report a conversation as spam, which also blocks the sender and moves the conversation to the spam folder. :contentReference[oaicite:6]{index=6}

What if you clicked the link but did not enter any information?

Close the website immediately.

Then:

1. Do not download or install anything.
2. Close your browser.
3. Check your phone for any unfamiliar downloaded files or apps.
4. Update your phone and security software.
5. Run a security scan if your device provides this option.
6. Watch your accounts for unusual activity.

Guidance from the FTC recommends updating security software and scanning the device after opening a suspicious link. :contentReference[oaicite:7]{index=7}

What if you entered personal or payment information?

Act quickly, but do not feel embarrassed. These messages are designed to look convincing.

1. Contact your bank immediately if you entered card or banking details.
2. Ask your bank to secure your account and stop or replace affected cards.
3. Change the password for any account you entered on the fake website.
4. Change the password anywhere else you used the same one.
5. Turn on two-step verification for important accounts.
6. Check your accounts for payments or changes you do not recognise.
7. Tell someone you trust so they can help you with the next steps.
8. Report the scam to the relevant company and your local fraud-reporting service.

If you shared a one-time security code, contact the relevant bank or account provider immediately.

What if you downloaded an app or file?

Disconnect your phone from the internet by turning off Wi-Fi and mobile data.

Do not open the downloaded file or give the app any further permissions.

Ask a trusted person, your phone provider or a reputable technical support service to help you remove it. Change important passwords using another trusted device.

How to report a suspicious text message

You may be able to:

• Use the Report spam or Report junk option in your messaging app.
• Block the sender.
• Report the message to your mobile network.
• Send the message to your country’s spam-reporting service, where available.
• Report the message to the company being impersonated.
• Contact your bank if the message involved financial information.
• Report any financial loss to your local police or fraud authority.

Reporting options vary by country. Use an official reporting service for the country where you live.

Remember: stop, do not click and check

A suspicious message may look urgent, but you do not need to act immediately.

A genuine company, bank or family member will understand why you want to check.