G2GGet to grips with tech

Home / Stay Safe / Scams

How do I spot a scam text?

A scam text tries to rush you into tapping a link, paying, or sharing your details. If a text makes you feel you must act right now, stop. Don’t tap anything. Check it yourself using a number or website you already know is real.

By Cameron, cybersecurity management graduateBeginner4 min readUK and USUpdated

The six warning signs

Scammers want you to act before you think. The UK’s National Cyber Security Centre (NCSC) lists five tricks to look out for, and the US Federal Trade Commission (FTC) adds a sixth giveaway: it asks for your details. A scam text often uses more than one.

It claims to be officialYour bank, the post office, a parcel company, the tax office, your doctor.
It’s urgent“Within 24 hours”, “immediately”, or a threat of a fine or a blocked account.
It plays on feelingsIt makes you worried, scared, hopeful or curious enough to tap.
It’s too good to missA prize, a refund, a gift card, or something in short supply.
It fits the newsTax time, a big sale, a delivery you might be expecting.
It asks for detailsPasswords, card or account numbers, or a code sent to your phone. Real companies won’t ask for these by text.

Good spelling doesn’t mean it’s real. The NCSC warns that scams are getting smarter and some fool even the experts. Judge the message by what it asks you to do, not by how it looks.

How to check if it’s real

  1. Don’t tap the link and don’t reply, not even to say “stop”.
  2. Find the company’s details yourself. Use the number on the back of your bank card or on a paper statement, or type the company’s website address into your browser. Never use the number or link in the text.
  3. Ask them whether they sent the message. If they didn’t, it was a scam.

Remember: your bank will never ask you to send personal information by text or email, or call to ask you to confirm your bank details. If a caller says they’re from your bank, hang up and ring the number on your card.

Report it to 7726

In both the UK and the US, you can forward a scam text to 7726 for free. (On a phone keypad it spells SPAM.) Your phone company can then look into the sender and block them. First, make a note of the number that sent it.

On an iPhone

  1. Press and hold on the message bubble.
  2. Tap More.
  3. Select the message or messages you want to forward.
  4. Tap the arrow at the bottom right of the screen.
  5. Type 7726 and send.

On an Android phone

  1. Open the conversation, then press and hold on the message bubble.
  2. Tap the three dots at the top right of the screen.
  3. Tap Forward.
  4. Type 7726 and send.

Then delete the text. In the US you can also report it to the FTC at ReportFraud.ftc.gov, and your messaging app may have its own “report junk” or “report spam” option.

If you already tapped the link

Don’t panic, and don’t feel silly: these messages are made to catch people out. Act quickly, based on what happened.

What happenedWhat to do now
You typed in bank or card detailsCall your bank straight away on the number on your card.
You typed in a passwordChange that password, and the password on any other account where you used the same one.
You installed something it told you toRun a full scan with your antivirus app if you have one, and let it clean up what it finds.
You’ve lost moneyTell your bank. In England, Wales and Northern Ireland, report it to Report Fraud; in Scotland, to Police Scotland. In the US, report it at ReportFraud.ftc.gov.
It came to a work phoneTell your IT team.

Next: protect your accounts with a strong password and two-step verification.

Sources