Something Fishy: Text Message Scams

You’ve heard not to click hyperlinks in emails, but did you know links in text messages can be just as dangerous? Here’s how to tell the good from the bad.

Story by Kelsey Opel


Text message scams are on the rise, and it’s important to know how to detect them.

Phishing via text message — also called “smishing” — is when a scammer uses a text message to “fish” for your personal information. This might be passwords, bank account information, or even your Social Security number.

Common phishing attempts claim to be from reputable businesses, such as a delivery service or cellphone provider. Scammers can also use Caller ID Spoofing to mask their information with a familiar phone number or area code.

AARP lists several other warning signs to detect a suspicious text message. Some red flags might be:

  • Requests for your personal information, such as passwords or credit card information
  • Links to resolve an account issue or claim a package or prize
  • Conveying a sense of urgency
  • Messages claiming to be the government

According to the Federal Communications Commission, the government will never contact you through a text message.

What to Do If You Receive a Malicious Text

If there’s a link in the message, don’t click it. Opening the link may download malware on your phone to steal your data or take you to a legitimate-looking website where the scammer may trick you into entering your personal information.

It’s also important to never respond to the message, even to reply “STOP”. Responding to the message will verify that your phone number is active and can lead to an increase in phishing attempts.

Next, report the scammer. Forward the text message to SPAM (7726). This will help the carrier investigate the suspicious text message. Then report the phishing attack to ReportFraud.ftc.gov.

If you happen to fall for a phishing scam and think a scammer might have your information, file a report with IdentityTheft.gov.

Personal Finance