Text Message Scams: How to Identify, Report, and Stop Scam Texts in 2025

Americans received an estimated 19 billion scam text messages in 2023 — roughly 58 per person, per year. The FTC received more than 350,000 reports of text message fraud, with reported losses exceeding $330 million. And because most victims never report, the real scale is believed to be many times larger.

Text message scams — also called SMS scams or smishing — have exploded in the past five years for a simple reason: they work. People open 98% of text messages they receive, usually within three minutes of receipt. Compare that to email, where open rates hover around 20%. Add in the fact that SMS has no equivalent of email’s mature spam filters, and you have the ideal delivery mechanism for mass fraud.

The scams themselves are not new. The fake package delivery notice, the overdue toll, the urgent bank alert, the government warning — these are recycled formats that have been running for years. What changes constantly is the specific brand being impersonated, the state-level targeting, and the urgency framing. This guide covers every major category, how each one works, and exactly what to do if you receive one.

—

How Text Scams Work

Every SMS scam follows the same basic architecture, regardless of the specific brand or scenario being used.

Step 1 — Acquiring your phone number.

Your phone number is obtained through data breaches, purchased from data brokers, harvested from websites and social media profiles, or simply generated through sequential number dialing. If your number has ever been entered on any website, it is almost certainly in multiple marketing and criminal databases.

Step 2 — Crafting the lure.

Scammers select an impersonation target — a delivery company, a toll authority, a crypto exchange, a bank — and write a short, alarming message designed to trigger an immediate response. The best lures combine believability (a brand everyone recognizes), urgency (a deadline or consequence), and a specific action (click this link or call this number).

Step 3 — Deploying the message.

SMS campaigns are sent in bulk through compromised carrier accounts, VoIP services, and international routing that bypasses U.S. regulations. A single campaign may deliver millions of texts simultaneously at minimal cost.

Step 4 — The capture mechanism.

The link in the text leads to a fake website — often a near-perfect clone of the legitimate brand’s site — that collects whatever the scammer is after: credit card numbers, login credentials, personal information, or a fee payment.

Step 5 — Extraction and use.

Captured information is immediately used for financial fraud, identity theft, or sold to other criminal operations. Fees collected go directly to the scammer, often via cryptocurrency or prepaid cards.

—

The 8 Most Common Types of Text Message Scams

1. Package Delivery Scam Texts

The most common category by volume. Fake alerts impersonating USPS, UPS, FedEx, and Amazon claim your package couldn’t be delivered, is being held, or requires a small fee to release. A link leads to a site capturing your payment card details. These scams thrive because most Americans are genuinely expecting deliveries at any given time.

→ Full alert pages: USPS · UPS · FedEx · Amazon

2. Toll Road Scam Texts

A rapidly growing category following FBI warnings in 2024. Fake texts impersonating EZPass, SunPass, and state toll authorities claim you have an unpaid toll balance and must pay immediately to avoid fines and license suspension. A link leads to a fraudulent payment page.

→ Full alert page: EZPass / Toll Scam Texts

3. DMV / BMV Scam Texts

Fake texts claiming your driver’s license, vehicle registration, or auto title requires immediate action — verification, renewal, or payment of a fee. The DMV scam text is among the most-searched scam topics in the country (14K searches/mo), indicating widespread receipt and alarm.

→ Full alert page: DMV Scam Text

4. Crypto Exchange Scam Texts

Fake security alerts from cryptocurrency platforms — primarily Coinbase — claiming your account has been accessed from a new device, that a large transaction is pending, or that your account will be closed. The Coinbase text scam generates 43,000 searches per month — the single highest-volume individual text scam keyword in the U.S.

→ Full alert page: Coinbase Text Scam

5. Bank Fraud Alert Texts

Fake texts from major banks — Bank of America, Chase, Wells Fargo — claiming suspicious activity on your account and asking you to click a link or call a number to verify. The link leads to a fake banking login that captures your credentials.

→ Full alert page: Bank Scam Texts

6. “Wrong Number” Text Scams

A scammer texts you as if by mistake — often appearing to be a friendly, attractive person who “accidentally” sent a message to the wrong number. After some friendly conversation, they introduce an “investment opportunity,” usually involving cryptocurrency. This is the gateway to pig-butchering scams.

→ Full alert page: Wrong Number Text Scam

7. Payment App Scam Texts

Fake texts impersonating Venmo, PayPal, Cash App, Zelle, Afterpay, and Apple Pay — claiming a payment has been sent or received, or that your account has been flagged. Links capture your app credentials or payment details.

→ Full alert pages: Venmo · Afterpay · Apple Pay

8. Subscription / Streaming Scam Texts

Fake texts impersonating Netflix, Spotify, Apple TV+, or other subscription services claiming your payment failed or your account is being closed. Less common than email versions of the same scam, but growing.

—

How to Spot a Scam Text in Under 10 Seconds

You don’t need to analyze a text message forensically. The vast majority of scam texts are identifiable within seconds using these checks:

Check 1: Were you expecting this?

If you’re not an EZPass customer, the EZPass text is a scam. If you haven’t ordered anything recently, the delivery failure notice is a scam. If you don’t have a Coinbase account, the Coinbase alert is a scam. Context mismatch is the fastest and most reliable filter.

Check 2: Is there urgency or a threat?

“Within 24 hours.” “Avoid a $35 late fee.” “Or your license will be suspended.” “Act now.” Urgency is the universal hallmark of scam texts. Legitimate companies rarely threaten immediate consequences via text.

Check 3: Does it contain a link?

Scam texts almost always contain a link — either a shortened URL (bit.ly, tinyurl) or a domain that doesn’t match the legitimate company. Hover-checking URLs isn’t possible on mobile, but you can press and hold the link on most phones to preview it before tapping.

Check 4: Is it asking for payment or personal information?

Toll authorities, government agencies, delivery companies, and banks do not collect payment or personal information through text links. Any text requesting this is fraudulent.

Check 5: Does the sender number look right?

Most legitimate business texts come from registered short codes (5-6 digit numbers) or recognizable brand numbers. A random 10-digit number sending an “official” alert is suspicious — though note that sophisticated scams do spoof legitimate-looking numbers.

—

What to Do If You Receive a Scam Text

Step 1: Do not click the link.

Even if you’re curious about the destination. Even if you just want to see what the scam looks like. Clicking a link on a mobile device, even without entering information, can in some cases trigger malware downloads on older or unpatched devices.

Step 2: Do not call any number listed in the text.

Numbers in scam texts connect to scammers, not the company being impersonated.

Step 3: Do not reply.

Replying — even to say “stop” or “unsubscribe” — confirms your number is active and can result in increased scam messages.

Step 4: If the text references a real service you use, check that service directly.

If you receive a text claiming to be from your bank, open your bank’s official app or type your bank’s real web address in your browser. If there’s genuinely an issue with your account, it will be visible there.

Step 5: Report the text.

Forward the text to 7726 (SPAM) — the FTC’s shortcode for reporting scam texts. This works on all major U.S. carriers. Also report at reportfraud.ftc.gov.

Step 6: Block the sender.

Block the number to prevent further contact, though be aware that scammers frequently rotate numbers.

Step 7: Delete the text.

—

What to Do If You Clicked a Scam Text Link

If you clicked but didn’t enter any information:

Close the page immediately. Run a security scan on your phone using Malwarebytes or your device’s built-in security features. Monitor your accounts for any unexpected activity over the coming days.

If you entered personal information (name, address, phone, SSN):

Report to the FTC at IdentityTheft.gov if your SSN was involved. Monitor your credit reports for new accounts. Consider placing a fraud alert or credit freeze at the three major bureaus.

If you entered payment card information:

Contact your bank or card issuer immediately — call the number on the back of your card. Request new card numbers. Review recent transactions for unauthorized charges.

If you entered login credentials for a bank, crypto exchange, or other account:

Change your password immediately on the real site (go there directly, do not use the link). Change any other accounts using the same password. Enable two-factor authentication. Contact the account provider’s fraud team.

—

How to Stop Scam Texts — 6 Effective Methods

Method 1: Report to 7726 (SPAM).

Forwarding scam texts to 7726 submits them to your carrier’s spam detection system. Over time, this training improves filtering for all users.

Method 2: Use your carrier’s spam filtering service.

T-Mobile Scam Shield, AT&T Call Protect, and Verizon Call Filter all include SMS spam filtering. Enable these services in your carrier’s app — most are free. Premium versions offer enhanced filtering.

Method 3: Filter unknown senders on iPhone.

Go to Settings → Messages → Filter Unknown Senders. This separates messages from people not in your contacts into a separate list and silences notifications from them. You can still see the messages — you just won’t be alerted in real time.

Method 4: Enable spam protection on Android.

In Google Messages, go to the three-dot menu → Settings → Spam Protection → Enable spam protection. This routes messages through Google’s spam detection system.

Method 5: Use a number-blocking app.

Apps like Nomorobo, RoboKiller, and Hiya provide enhanced blocking for known scam numbers. They work on both calls and texts for many carrier configurations.

Method 6: Be selective about where you share your number.

The more places your number exists, the more spam and scam texts you’ll receive. Opt out of marketing texts from retailers, use a secondary number for non-essential signups, and review app permissions to limit unnecessary phone number sharing.

—

How to Report Scam Texts

Forward to 7726 (SPAM): Works on all U.S. carriers — AT&T, T-Mobile, Verizon, and most MVNOs.

Report to the FTC: reportfraud.ftc.gov — provide as much detail as possible, including the sending number and a screenshot.

Report to the FCC: fcc.gov/consumers/guides/filing-informal-complaint — the FCC handles complaints about illegal robotexts and spoofed numbers.

On iPhone: Tap the message → tap the sender → tap “Report Junk” (for unknown senders who haven’t been added to your contacts).

On Android (Google Messages): Open the conversation → tap the three-dot menu → “Block & report spam.”

→ Full guide: https://www.scammed.org/text-scams/how-to-report-scam-texts/

—

Why Text Scams Are Getting Harder to Spot

Text scams in 2025 are more convincing than ever for several reasons:

AI-generated content. Generative AI has eliminated the grammar and spelling errors that used to mark scam texts as obvious fakes. Scam messages now read fluently and naturally, with correct punctuation and contextually appropriate language.

Data-driven personalization. With billions of records available from data breaches, scammers increasingly include real information about targets — your name, your city, your bank, a recent purchase — to make the message feel legitimate.

Link obfuscation. Shortened URLs, look-alike domains, and HTTPS certificates (which scam sites now routinely use) make fraudulent links harder to identify at a glance. The padlock icon no longer means a site is trustworthy — it only means the connection is encrypted.

Number spoofing and rotation. Scammers use technology to display legitimate-looking numbers or rotate through large pools of numbers to evade carrier blocking.

Timing and context exploitation. Scams are increasingly timed to coincide with real events — tax season (IRS alerts), holiday shopping peaks (delivery scams), major news events (stimulus payment scams) — making them feel even more contextually relevant.

—

Frequently Asked Questions

Q: Does the DMV, USPS, or government actually send text messages?

A: Some government agencies do send legitimate text messages — particularly for two-factor authentication, appointment reminders, and opt-in notification services. However, they do not send unsolicited texts demanding immediate payment or action. If you receive an unexpected text from a government agency demanding a fee or threatening a penalty, treat it as a scam and verify through the agency’s official website.

Q: Can I get a virus from opening a scam text?

A: Simply reading a text message is generally safe on modern, updated devices. The risk comes from clicking links within the text. However, some malicious links can attempt to download malware — particularly on older Android devices with unpatched security vulnerabilities. Always keep your device’s operating system and apps updated.

Q: Why am I suddenly getting so many scam texts?

A: Your number may have appeared in a recent data breach, been sold by a data broker, or been added to a scammer’s list through a website you signed up for. Increased scam text volume is also common after major events like large data breaches, because millions of newly available numbers flood criminal markets simultaneously.

Q: Is it safe to reply “STOP” to a scam text?

A: No. Replying to a scam text — even with “STOP” — confirms your number is active and monitored, which can actually increase the volume of scam texts you receive. Only use STOP to unsubscribe from legitimate marketing texts from real companies you have an established relationship with.

Q: How do scammers know my name?

A: Your name is attached to your phone number in data broker databases and breach records. Scammers who have access to these datasets can include your name in messages to make them feel more personal and legitimate.