How to Spot a Scam Text Message: 7 Warning Signs
Scam texts work because they're built to. They land when you're distracted, they sound urgent and official, and they push you to act before you think. The good news: nearly every scam SMS carries the same handful of tells. Learn these seven, and you'll catch the vast majority of them in about ten seconds.
Below are the warning signs that show up again and again — in fake bank alerts, parcel-delivery scams, prize wins, and job offers. You rarely need all seven to be sure; two or three together is a strong signal that a message is not what it claims to be.
1. It arrives out of nowhere and rushes you
Artificial urgency is the number-one tactic. A deadline, a threat, a countdown — all designed to stop you pausing to think. Real banks and companies give you reasonable time and don't threaten instant consequences over a text.
2. It asks for an OTP, PIN, or password
This is the biggest red flag of all. No genuine bank, wallet, delivery service, or official will ever ask you to read out a one-time code (OTP), PIN, or password. The code is the key to your account — anyone asking for it is trying to break in right now.
3. It contains a link that doesn't match the brand
Read the web address from right to left: the real destination is the part just before the first single slash. Watch for misspellings, extra words, hyphens, and odd endings like .top, .xyz, or .info attached to a familiar brand name. A real company uses its plain, short website.
4. It demands a payment or "small fee"
You should never have to pay to receive a prize, release a parcel you weren't expecting, or "unblock" your own account. Requests for payment by UPI, gift cards, or a random link are a classic scam pattern — especially gift cards and cryptocurrency, which are untraceable.
5. It promises something too good to be true
You can't win a lottery you never entered. Prize wins, guaranteed daily income, and "you've been selected" messages exist to get your bank details or a fee up front. The winnings never arrive.
6. It uses a vague, impersonal greeting
A company you actually deal with usually knows your name. A generic "Dear Customer" or "Dear User" often means the message was blasted to thousands of numbers at once — a hallmark of scams.
7. The sender or number looks off
Banks and big companies use registered sender IDs, not personal mobile numbers. But be careful: sender names and even the thread can be spoofed to look genuine, so never rely on appearance alone — which is exactly why the golden rule below matters.
Never use the link or number in the message. If a text claims to be from your bank, delivery company, or any service, don't tap the link or call the number it gives you. Open the official app or type the website address yourself, and check there. If the message were real, the same information will be waiting for you — and if it wasn't, you've lost nothing.
Not sure about a message?
Paste it into our free Scam Message Checker. It reads the text and tells you, in plain language, exactly which warning signs it spots — right in your browser, nothing uploaded.
Check a Message →One honest limit worth remembering: scammers constantly reword their messages, and a well-crafted one can avoid the obvious tells. So treat these signs as a fast filter, not a guarantee — whenever money, passwords, or codes are involved, slow down and verify through official channels. That pause is your best protection.
Frequently Asked Questions
How can I tell if a text is really from my bank?
Don't judge by the sender name or the wording — both are easy to fake. The reliable way is to ignore the message entirely and check independently: open your bank's official app or type its website address yourself, or call the number printed on the back of your card. If there's a genuine issue, it will show up there. A real bank will never mind you verifying this way.
I replied to a scam text — am I in danger?
Simply replying with text is usually low-risk, but it does confirm your number is active, so expect more attempts. The real danger is if you clicked a link and entered details, shared an OTP or password, or made a payment. If you did any of those, act quickly: change affected passwords and contact your bank. Don't continue the conversation.
Should I click the link just to see where it goes?
No. Some scam links can load pages that harvest information or push you toward a fake login the moment you open them. If you want to know where a link really leads, check it safely first with a tool like our Phishing Link Checker, which shows the true destination without you having to open it.
What should I do with a scam text?
Don't reply, don't click, and don't call any number in it. Where available, report it (many countries let you forward scam SMS to a short code like 7726), then delete it. If it impersonates a company you use, you can also let that company know through their official channels so they can warn others.