Your phone buzzes. It's a text saying your package couldn't be delivered, and you need to "confirm your details" right now. Your stomach drops a little. Were you expecting a package? Maybe? You're not sure.
First, the most important thing: a scam text can't hurt you just by sitting in your inbox. Reading it is completely safe. The only way one of these can cause trouble is if you tap the link and then type something in. So you have all the time in the world to slow down and look. Nothing is on fire.
Scam texts (the fancy word is "smishing" — scam + SMS) all lean on the same trick: they try to make you feel a jolt of worry or urgency so you act before you think. Once you know the pattern, you'll spot it in seconds — and honestly, it gets a little satisfying.
The three quick checks
Before you tap anything in a text you weren't expecting, run these three checks. They take about ten seconds together.
1. Does it try to rush you or scare you?
Real companies don't threaten you over text. Scammers do — because pressure is the whole game. Watch for lines like:
- "Your account will be suspended in 24 hours."
- "Unusual activity detected — verify immediately."
- "Final notice before your package is returned."
That squeeze of urgency is the tell. When a message is pushing you to act right now, that's your cue to slow down, not speed up.
2. Look at the link — don't tap it, just read it.
This is the big one. You can read a web link the same way you'd read the return address on an envelope, without opening anything. Real companies use their own plain name in the address, like usps.com or chase.com.
Scam links look "almost right" but a little off. Learn to read the part right before that first single slash — that's the real destination:
- usps.com/track — real
- usps.delivery-confirm.net — fake (the real name is "delivery-confirm.net," not USPS)
- usps-tracking.secure-login-verify.co — fake
If you have to squint to tell whether a link is real, that is your answer. Real companies don't make you squint.
3. Were you actually expecting this?
A text about a delivery you never ordered, a refund you never requested, or a bank you don't even use? That's not a coincidence — scammers text thousands of numbers hoping a few happen to match. If it doesn't line up with something you actually did, treat it as fake.
What to do instead
Here's the calm, safe habit that replaces tapping the link — and it works for every message like this:
- Don't tap the link. Not even to "just check." That's the one move that matters.
- Go to the real source yourself. If it claims to be your bank, open your bank's own app, or type their web address in yourself. If there's a real problem, it'll show up there too.
- Or call the number on the back of your card or on the company's official site — never a phone number from the text itself.
Notice the theme: you go to them through a door you trust, instead of the door the text is holding open for you.
Two extra moves that feel great
Once you've confirmed a text is junk, you can do a little tidying:
- Report it. Forward the text to 7726 (that spells "SPAM" on the keypad). It's free, and it helps your phone carrier block these for everyone.
- Delete it and, if you like, block the sender. There's a "Delete and Report Junk" option on iPhone, and "Block & report spam" on most Android phones.
You've got this
That's the whole skill. From now on, when a text tries to rush you, you'll pause instead of panic, read the link instead of tapping it, and ask "was I expecting this?" — and you'll know. You just moved yourself from "I hope this is fine" to "I can tell, and I know what to do."
And remember: forwarding a suspicious text to a friend to ask "does this look real to you?" isn't silly — it's smart. Even the tech-savviest people do it. There are no dumb questions here.