How do I know if a text message is a scam?
Short answer
Treat a text as a scam if it asks you to tap a link, pay a small fee, confirm a transaction, or call a number — especially about tolls, package delivery, or bank security. Do not tap. Verify by opening the company's official app or typing its website address yourself. Forward scam texts to 7726 (SPAM) and delete them.
Reviewed and updated by the Safe Retire Watch Research Team.
Part of our Phishing & email scams hub.
The four texts flooding phones right now
- Unpaid toll: a small balance and a link that looks like a state toll authority. The amount is tiny so you do not scrutinize it.
- Package redelivery: USPS, FedEx, UPS, or Amazon claiming an address problem and a fee. Carriers do not text for redelivery fees.
- Bank alert: 'Did you authorize a $482 transfer? Reply Y or N.' Replying N triggers a phone call from the 'fraud department' — the actual attack.
- Wrong number: a friendly stranger who apologizes and then keeps chatting. This is the opening move of an investment or romance scam.
How do I check a text in under a minute?
- 1Do not tap the link and do not reply — even 'STOP' confirms the number is live.
- 2Read the domain carefully: scam links use lookalike spellings, extra words, or unusual endings before the first single slash.
- 3Open the company's official app, or type the address you already know into your browser. Real alerts exist inside the account.
- 4If it concerns money, call the number on your card or statement.
- 5Run the link through our free link checker if you want a second opinion without visiting the page.
- 6Forward the message to 7726 (SPAM) so your carrier can block the sender, then delete it.
What if I already tapped the link?
- 1If you only opened the page and typed nothing, close it. Risk is low.
- 2If you entered card details, call your card issuer's fraud line and request a new number.
- 3If you entered a password, change it there and anywhere reused, starting with email, and enable two-factor authentication.
- 4If you shared a one-time code, contact the institution immediately — a code hands over the account.
- 5If you installed anything, disconnect from Wi-Fi and have the device checked.
Frequently asked questions
Is it safe to open a scam text?
Opening and reading a text is essentially always safe. Harm begins when you tap a link, reply, call the number, or enter information. If you opened a suspicious message and did nothing else, forward it to 7726 and delete it.
Why do I get texts about tolls in states I've never visited?
Because the messages are blasted to millions of numbers regardless of location. The tiny balance and official-sounding agency name are designed to make paying feel faster than checking. Real toll authorities bill by mail or through an account you set up; verify only through the official state website you look up yourself.
Does replying STOP work on scam texts?
No. STOP works with legitimate marketers who follow the rules. With scammers it simply confirms a live number, which usually increases the volume. Forward to 7726, block the sender, and delete.
Sources and further reading
Guidance on this page is based on current advisories from these authorities.
- Federal Trade Commission — How to recognize and report spam text messages
- Federal Communications Commission — Report unwanted texts
Read the full guides
- FedEx Scam Text in 2026: The Fake Delivery Message That's Draining Senior Bank AccountsA text message from 'FedEx' says your package couldn't be delivered — click here to reschedule or pay a $1.99 fee. It's the #1 fastest-growing smishing scam targeting U.S. retirees, and the link doesn't lead to fedex.com. It leads to a fake page that steals your credit card, installs malware, or hands your Apple/Google account to overseas criminals. Here's exactly how the FedEx text scam works in 2026, the 10 red flags in every fake message, what happens if you already clicked, and step-by-step how to lock your accounts and get your money back.
- Bank of America Text From 322-632 or 20504? How to Tell if It's a ScamGot a text from 322632 (322-632), 20504 or another number claiming to be Bank of America? Real BofA fraud alerts come from 39-411 or 322-78 with no links. Check yours in 30 seconds.
- Toll Road Scam Text: How to Spot the Fake 'Unpaid Toll' Message (2026 Guide)The fake unpaid-toll text is the #1 smishing scam in America — FBI IC3 logged 60,000+ reports in a single month. Learn the 7 red flags, the real toll agencies' contact rules, and the 24-hour recovery steps if you already clicked or paid.
- How to Tell if a Website Is Legit: 11 Checks (2026)A plain-English, 2-minute checklist retirees can use to tell if a website is legit or fake before buying, logging in or entering card details — plus what to do if you already paid.