SMS scams use text messages to obtain money, login credentials, or personal information, often by linking to a false payment or account page. Text-based phishing is also called smishing. The FTC advises checking unexpected requests through a known company website or telephone number. Do not treat a familiar business name or an urgent warning as proof of authenticity.
The first check for SMS scams is to leave the text and open the relevant account independently. A supposed delivery fee, bank alert, prize, or account problem should be compared with the real service. Do not reply with sensitive information or enter payment details through the link. Save the message before reporting it and blocking further contact.
How SMS scams turn a short message into a payment
According to the FTC, scam texts offer prizes, claim account trouble, or ask recipients to confirm personal information. The limited text creates a reason to click quickly, while the linked page collects the details. Examine what action is being requested. An account warning should be checked in the genuine account, rather than through a new page presented by the sender.
A link can imitate a trusted company while leading somewhere else. FTC phishing guidance warns that attachments and links may also install harmful software. A polished page and a familiar logo do not establish who operates it. Use the message checking tool to structure the warning-sign review, then confirm the underlying claim through the actual organization.
Unexpected conversations and investment approaches
SMS scams can begin as conversations rather than an immediate payment demand. The CFTC warns about responding to unfamiliar senders and investment approaches through messaging apps. A friendly exchange should not become a reason to trust a trading website or forward money. Check the offering and any required registration through the appropriate regulator before providing account information or funds.
Do not let a text message become the only source for a company’s support number. Federal Trade Commission guidance recommends independently contacting the business when a request might be real. If a bank alert claims a transaction occurred, open the bank’s genuine app or use the number on the card. Explain the message without following the sender’s transfer instructions.
- Do not click links in unexpected payment or account texts.
- Check the claim through the genuine organization.
- Forward suspicious texts to 7726 and report fraud to the FTC.
Reporting SMS scams and responding after a click
The FTC recommends forwarding suspicious text messages to 7726, which spells SPAM, and reporting them through the messaging app when available. A fraud report can also be made at ReportFraud.ftc.gov. Keep the sender, text, time, and linked domain available for the report. Forwarding a message is a reporting step, not a reason to open its suspicious link.
After SMS scams lead to information being entered, respond according to the exposure. A disclosed bank card calls for prompt contact with the issuer; a disclosed password calls for account security changes. If a link downloaded harmful software, the FTC recommends updating security software, running a scan, and removing identified problems. Report actions taken instead of guessing what happened.
What to do after an SMS scam payment
After paying through a text’s supposed delivery or account link, contact the actual payment provider immediately. FTC guidance recommends requesting reversal or reimbursement. Supply the SMS, linked address, and transaction reference, explaining whether the recipient approved payment under that story or someone used the account without permission. Open the genuine financial service independently instead of using the text’s contact instructions.
Preserve the text, sender number, claimed business, destination link, and payment demand before blocking further messages. Record whether it concerned a parcel fee, bank alert, prize, or account problem. The reporting guide helps organize the sequence. Include what information was entered on the linked page so the provider can distinguish the small requested payment from any later account activity.
If an SMS link captured a login, replace that password through the real service and change it on other accounts where reused. FTC guidance recommends multifactor authentication and IdentityTheft.gov for exposed identity information. Check the purported delivery or banking issue independently. The phone checking guide explains why a number displayed in a text thread cannot authenticate a subsequent support call.
Reporting smishing and recovery demands
Report suspected text-payment deception at ReportFraud.ftc.gov, supplying the sender number, link, claimed company, and amount. Internet-enabled crime can also be submitted at IC3.gov. Keep the original SMS and a report copy. Continue asking the actual financial provider about repayment separately, since documenting a smishing message does not itself cancel the transfer or secure an account whose credentials were entered.
A follow-up message promising to recover money lost through a text link deserves fresh verification. IC3 warns that private recovery businesses do not partner with it. Use the recovery scam guide before paying another fee or sharing documents. A sender who knows the parcel story, disputed charge, or phone number still has not an official role in retrieving the money.
Questions and answers
What does smishing mean?
Smishing is phishing through text messages. The FTC describes texts that ask for personal information or lead recipients to suspicious links. Check an unexpected bank, delivery, or account request through the organization’s genuine website or app instead of the text.
Where should a suspicious text be forwarded?
The FTC recommends forwarding suspicious texts to 7726, which spells SPAM, and using the messaging app’s reporting option when available. Fraud can also be reported at ReportFraud.ftc.gov. Keep the message details without opening the suspicious link.
What if a text appears to come from the bank?
Open the bank’s genuine app or use the number on the payment card to check the claim. The FTC recommends contacting a business through a trusted route outside a suspicious message. Do not follow transfer instructions supplied by the sender.
Does clicking a link require the same response as entering a password?
The response depends on what occurred. The FTC recommends changing compromised credentials and addressing exposed financial information with the relevant provider. If a link downloaded harmful software, update security software, run a scan, and remove the identified problems.
What if a fake delivery text led to a payment?
Notify the financial provider immediately about the supposed delivery charge and ask for reversal or reimbursement, following FTC advice. Save the SMS sender, link, and payment recipient. Check any real shipment through the retailer or carrier separately instead of paying another fee requested in the text thread.
Where can an SMS payment scam be reported after forwarding it to 7726?
The FTC accepts fraud reports through ReportFraud.ftc.gov, while IC3 accepts internet-enabled crime complaints. Include the text's claimed business, destination link, requested fee, and transaction details. Forwarding a message to the carrier helps report the SMS but does not itself challenge the money already transferred.
What if an SMS link captured a banking or shopping password?
Use the real provider's website or app to replace the exposed password and update other accounts sharing it. FTC guidance recommends multifactor authentication. Preserve the text without revisiting its link, and address any disclosed payment details with the financial institution as a separate exposure.
Can a text claiming IC3 recovered the lost money be trusted?
IC3 says it does not work with private recovery businesses and does not contact victims directly for money or information. A text claiming recovered funds need a release fee therefore requires independent checking. Preserve the message and use the genuine IC3 site to report the impersonation.
Sources
- How to Recognize and Report Spam Text Messages · Federal Trade Commission
- Use Caution Responding to Messaging Apps · Commodity Futures Trading Commission
- How To Recognize and Avoid Phishing Scams · Federal Trade Commission
- What To Do if You Were Scammed · Federal Trade Commission
- Internet Crime Complaint Center · Federal Bureau of Investigation