How to spot a text message scam
Scam messages are engineered to steal your details to con you now or in the future. We've seen scam messages on most messaging platforms, such as SMS, WhatsApp, Facebook Messenger, Viber and Skype.
By using identity masking technology to change the name displayed as the sender, scammers often make it look like a legitimate organisation is contacting you via text or a messaging app. This is known as ‘number spoofing’.
Whether it's claiming you've missed a delivery, impersonating the government to offer non-existent discounts on energy bills, or pretending to be a family member or friend in need, there are many different tactics used in text scams.
Sign up for scam alerts
Our emails will alert you to scams doing the rounds, and provide practical advice to keep you one step ahead of fraudsters.
Sign up for scam alerts
How can you spot a scam message?
Scammers are getting more cunning at making messages look like the real thing.
Here is an example of a scam text impersonating the DVLA, it claims the agency requires 'confirmation of your driver's licence record'. The text leads to a phishing website.
While these scam messages might appear legitimate at first, there are ways to spot the scam.
1. Message from an unknown number
Most organisations protect their 'Sender ID' so text messages should be from 'HSBC' or 'Royal Mail' instead of a generic phone number.
Don't always trust the number though as Sender ID names can be hijacked on smartphones.
If in doubt, contact the organisation directly using a verified number from the organisation's official website.
2. Requests for payments or details
Genuine organisations rarely ask you to pay or make account changes via text message without first logging into your account. If you're being asked for sensitive information, it's best to contact the organisation directly yourself using official channels.
3. Website links
If the message includes a website link, don't click on it. You should first carry out checks to make sure the link is legitimate.
Scammers can create convincing-looking websites, so just because it looks genuine doesn't mean it is.
You should consider whether the website address matches that of the organisation. Make sure the website link belongs to that of the organisation's official domain, such as gov.uk for a government organisation like the DVLA.
Always look up an organisation's details independently to double-check the details.
- Find out the seven ways to spot a scam website
4. Spelling errors and odd wording
Banks, government departments and couriers will rarely make spelling or grammatical errors. If the message doesn't make sense, it's a strong giveaway that it's a scam.
Scam bank messages
If you get a message claiming to be from your bank, always treat this with caution.
Your bank should never:
- Ask for your Pin or internet banking password.
- Send someone to your home to collect cards or banking information.
- Ask you to email or text personal or banking information.
- Email a link where you have to then input your internet banking details.
- Ask you to authorise a funds transfer which you haven’t requested.
- Tell you to invest in diamonds, land or other commodities.
- Ask you to carry out a test transaction.
- Send you to a mobile app other than their own official app.
If you receive an unexpected message from your bank and you're concerned whether it's genuine or not, you can call your bank back via an official telephone number printed on the back of your debit or credit card.
How to avoid message scams
Here are a few tips to help you avoid message scams.
1. Don't follow any links
This is the most effective way to avoid text scams. Links can take you to cloned websites designed to steal your money or personal data. Because links are often shortened to help them fit into the message, it’s not always easy to tell the real ones from the fakes. Clicking on links could also lead you to download malware - malicious software that can take over your phone and access your data.
2. Don't share personal information
Treat all messages requesting sensitive information - or that link you to websites asking for personal details - with suspicion. Legitimate organisations will never text you to ask for your personal or banking details upfront.
3. Contact the organisation directly if you're unsure
If you're not sure if a text is real, contact the company that claims to have sent it to check. Use the official contact details listed on the company’s website or documents you might have been sent, if it's your bank then you can usually find its official number on the back of your credit or debit card.
4. Don't reply
Replying to a fake text, calling the number it’s been sent from or clicking through on suspicious links only lets the scammers know your number is being used. You might be bombarded with even more scam messages and calls. The number has likely been spoofed anyway, which means you’ll probably only be messaging an innocent member of the public who has had their number stolen.
If you have already responded to the message, you should be cautious about further contact from the scammers. If you think you have shared sensitive information with a scammer, you should notify your bank.
5. Report it
You report scam texts by forwarding the message to 7726 - a free reporting service provided by phone operators. This information is then shared with the police and intelligence agencies working to stop text scams.
Alternatively, you can use your phone to take a screenshot of the text and send the image to report@phishing.gov.uk.
If you've fallen victim to a text scam, you can report it to Action Fraud, or the police if you live in Scotland.
- Read more about Report a scam
Seen or been affected by a scam? Help us protect others
Sharing details of the scam helps us to protect others as well as inform our scams content, research and policy work. We will collect information relating to your experience of a scam, but we won't be able to identify your responses unless you choose to provide your contact details.
Share scam details