Text Message Scams and Fake Delivery Notices

Why texts are a favorite channel

Text messages feel personal. They arrive on a device you carry everywhere, we tend to read them quickly, and short messages leave little room for the odd wording that might give an email away. Sending large numbers of texts is cheap, so even if few recipients respond, scammers may still gain. Messages are sometimes called smishing, a blend of “SMS” and “phishing,” although many scams now use messaging apps too.

The purpose is almost always the same: get you to tap a link, call a number, reply with a detail or approve something before you have time to think.

Common scripts

The wording changes, but a handful of storylines recur.

• Delivery problems. “We tried to deliver your package,” “your parcel is held, pay a small fee,” or “confirm your address.” These work because many people are expecting a parcel at any given time, and a small fee seems harmless. The page you reach often asks for card details, which can then be used for much larger charges.
• Bank or account alerts. “Unusual activity,” “your card has been blocked,” or “log in to verify.” The link goes to a copy of a sign-in page.
• Unpaid fines or tolls. A message claims you owe a small amount and threatens extra penalties. Real agencies typically use official notices, but the message hopes you will pay first and check later.
• Wrong-number openers. A friendly “Hi, is this Anna?” or “Sorry, I think I have the wrong person.” If you reply, a conversation starts that can lead to friendship, romance or an investment pitch.
• Family emergency. “Hi Mum, I lost my phone, this is my new number.” The aim is to prompt a quick money transfer.
• Prizes and refunds. “You’ve won,” or “you are owed a refund, click to claim.”
• Verification codes. A message says that a code was sent to you by mistake and asks you to read it back. Handing over the code can let someone take over an account.
• Job offers by text. Brief, unsolicited messages about easy remote work, which can overlap with the patterns of fake job offers.

Warning signs

• You were not expecting it. You do not remember ordering a parcel from that company, or you have no account there.
• It asks you to act quickly, with a deadline.
• The link looks odd: a long string, a shortened address, or a domain that only resembles the real one.
• A number that is unfamiliar, odd in length or an ordinary mobile number for an organization that normally uses a short code. Note that sender names can be faked, and fake messages sometimes appear in the same conversation thread as genuine ones.
• It asks for a payment, personal details or a password, or wants you to confirm a code.
• It uses a generic greeting instead of your name, although some use your name because details can be found in earlier data leaks.
• Spelling or formatting looks off. Do not rely on this alone, since plenty of scams look neat.

How to verify safely

The most important rule is to avoid using the link or phone number in the message.

1. Pause. A parcel can wait a few minutes. So can a bank.
2. Go to the source yourself. If you think the message might be genuine, open the carrier’s or bank’s official app, or type the website address yourself. Look for the parcel or alert there. Tracking numbers and orders are normally visible inside your own account.
3. Check what you ordered. If you cannot connect the message to a purchase, that is a clue. Look in your email or order history.
4. Call using a trusted number. For bank messages, use the number on your card.
5. Ask someone. For a “family” message, call the person on the number you already have, or ask a question only they would know.
6. Never share one-time codes. A genuine service does not need you to read a code back to them.
7. Do not reply, even with “STOP.” Responding can show the number is active and invite more messages. Instead, use your phone’s block and report-junk options.
8. Be careful with attachments and QR codes that come unexpectedly.

Keeping your phone’s operating system and apps up to date, and being careful about app permissions, also reduces the harm if something slips through.

If you tapped or entered details

Don’t panic; it is common.

• If you entered card details, call your bank or card provider promptly, using the number on the card. They may cancel the card and review recent activity.
• If you entered a password, change it on the real site and on any other site where you used it. Turn on two-step verification.
• If you downloaded something, turn on airplane mode, remove the app or file, and run a scan with trusted security tools. If unsure, ask a trusted technician. Having recent data backups makes recovery simpler.
• If you shared a code, secure the matching account immediately.
• Watch statements and messages for unfamiliar charges in the following weeks.

Reporting

Many phone carriers accept forwarded scam texts to a reporting number, which your provider’s website explains. You can also report to your national fraud-reporting agency or consumer-protection office, and to the delivery company or bank being imitated. Reports help block senders, though they cannot undo losses. If you lose money, contact your local police as well.

This is general information, not legal or technical advice. Reporting routes and consumer protections differ between countries, so check what applies where you live.