Is That Text Message a Scam? How to Tell in 2026
I got three scam texts in a single week last month. One pretended to be from AusPost about a missed delivery. One claimed my Optus account was being suspended. And one said I had an unclaimed myGov refund. All three had links. All three were fake. I'm someone who checks URLs for a living, and even I'll admit the AusPost one looked convincing at first glance.
Scam text messages, also known as "smishing," are one of the fastest-growing cyber threats in Australia and worldwide. In this guide, I'll show you exactly how to identify them, walk through real examples of the most common types, and give you a free tool to check any suspicious message instantly.
📱 Got a suspicious text right now?
Check it instantly with our free SMS Scam Analyzer, paste the text or upload a screenshot.
Check It Now, FreeHow to Tell If a Text Message Is a Scam
Scam texts follow predictable patterns. Once you know what to look for, they become much easier to spot. Here are the biggest red flags:
1. Urgency and threats. Scammers want you to act before you think. Phrases like "act now," "your account will be closed," "immediate action required," or "respond within 24 hours" are designed to create panic. Legitimate companies rarely send urgent demands via text.
2. Suspicious links. The link is usually the most telling sign. Scam texts contain URLs with misspelled brand names (like "amaz0n-delivery.com"), unusual domain endings (.xyz, .top, .tk, .buzz), or shortened URLs that hide the real destination. A real company will direct you to their official website, not a random domain.
3. Requests for personal information. No legitimate bank, government agency, or delivery service will ask for your password, Tax File Number, credit card details, or PIN via text message. If a text asks for any personal or financial information, it's a scam. Full stop.
4. Too good to be true. Messages claiming you've won a contest you never entered, offering free gift cards, or promising large sums of money are classic scam tactics. If it sounds too good to be true, it is.
5. Unknown or spoofed sender. Scam texts often come from random phone numbers, international numbers, or even email addresses. Some scammers spoof numbers to appear as if they're from a legitimate company or government agency.
The 7 Most Common Text Message Scams in 2026
Here are the most widespread scam text types we detect with our analyzer, along with real examples of what they look like:
1. Fake Delivery Notifications
The most common scam text by far. These pretend to be from AusPost, USPS, FedEx, Amazon, or DHL and claim there's a problem with your delivery.
⚠️ SCAM EXAMPLE
USPS: Your package could not be delivered due to an incomplete address. Update your info to schedule redelivery: http://usps-redelivery.xyz/update
Why it works: With so many people ordering packages online, there's a good chance you're actually expecting a delivery. The scammers are counting on that coincidence.
How to spot it: USPS, FedEx, and UPS will never ask you to click a link to pay a fee or update your address via text. Check your tracking directly on the carrier's official website or app.
2. Banking and Financial Alerts
These texts impersonate your bank and claim there's suspicious activity, a locked account, or a pending transaction that needs verification.
⚠️ SCAM EXAMPLE
ALERT: Unusual activity detected on your Chase account. Your card has been temporarily locked. Verify your identity: http://chase-secure.tk/verify
How to spot it: Banks never send links in text messages asking you to "verify" your account. If you're concerned, open your banking app directly or call the number on the back of your card.
3. Prize and Lottery Scams
You've won something you never entered! These promise cash, gift cards, iPhones, or other prizes.
⚠️ SCAM EXAMPLE
Congratulations! You've been selected to receive a $500 Walmart gift card! Claim your reward now: http://walmart-rewards.top/claim
How to spot it: You cannot win a contest you didn't enter. Period. Legitimate sweepstakes don't notify winners via random text messages.
4. Government Impersonation
These claim to be from the ATO, Centrelink, myGov, or other government agencies, often threatening legal action or claiming you owe money. In the US, they impersonate the IRS and Social Security Administration.
⚠️ SCAM EXAMPLE
IRS NOTICE: You have an outstanding tax liability. Failure to resolve within 24 hours will result in legal action. Resolve now: http://irs-payment.buzz/resolve
How to spot it: The ATO, Centrelink, and myGov never send text messages demanding immediate payment or threatening legal action. They communicate through official mail and your myGov inbox. Any text claiming to be from a government agency demanding immediate payment is a scam. Always.
5. Verification Code Theft
These try to trick you into sharing a verification code that was sent to your phone, which can be used to hack your accounts.
⚠️ SCAM EXAMPLE
Hi, I accidentally sent a verification code to your number. Can you please send it back to me? Sorry for the trouble!
How to spot it: Verification codes are meant only for you. Nobody "accidentally" sends a code to the wrong number. Sharing a verification code can give hackers access to your accounts.
6. Cryptocurrency and Investment Scams
These promise guaranteed returns, free Bitcoin, or exclusive investment opportunities.
⚠️ SCAM EXAMPLE
Exclusive opportunity! Invest $500 in Bitcoin today and earn $5,000 in 48 hours. Limited spots: http://crypto-invest.top/join
How to spot it: No legitimate investment guarantees specific returns. Any promise of "guaranteed profits" or multiplying your money in a short time is a scam.
7. Tech Support Scams
These claim your phone, computer, or online account has been compromised and urge you to call a number or click a link for "support."
⚠️ SCAM EXAMPLE
SECURITY ALERT: Your Apple ID has been compromised. Your account will be disabled unless you verify: http://apple-id-verify.xyz/secure
How to spot it: Apple, Google, and Microsoft don't send text messages about compromised accounts. Check your account security directly through the company's official app or website.
What a Safe Text Message Looks Like
For comparison, here are examples of normal, safe text messages:
✅ SAFE EXAMPLE
Hey! Are we still meeting for coffee at 3pm today?
✅ SAFE EXAMPLE
Your appointment with Dr. Smith is confirmed for Tuesday at 10:00 AM. Reply C to confirm or R to reschedule.
Safe messages are personal, expected, and don't pressure you to click unfamiliar links or share sensitive information.
What to Do If You Receive a Scam Text
Follow these steps:
1. Don't click any links, This is the most important step. Don't tap on any links in the message.
2. Don't reply, Replying confirms your number is active, which leads to more scam messages.
3. Block the number, Use your phone's built-in blocking feature.
4. Report it, In Australia, forward the text to 0429 999 888 (Scamwatch's scam reporting number). In the US, forward to 7726 (SPAM). This helps authorities track and block scam numbers.
5. Delete the message, Remove it so you don't accidentally tap a link later.
Already Clicked a Link? Here's What to Do
If you already tapped a link in a scam text, don't panic, but act quickly. Change passwords for any accounts that may be affected, especially your email and banking accounts. Enable two-factor authentication on all important accounts. Monitor your bank statements and credit report for unauthorised activity. Run a security scan on your device. If you entered financial information, contact your bank immediately to freeze your account.
For a complete response guide, see our detailed article: What to Do If You Clicked a Suspicious Link.
📱 Check Any Suspicious Text for Free
Paste the message or upload a screenshot. Our analyzer detects 15+ types of scams instantly.
Analyze a Text Message NowCan You Get Hacked by Just Opening a Text?
Simply reading a text message is generally safe. The risk comes from interacting with it, clicking links, downloading attachments, or calling numbers in the message. Modern smartphones have security features that prevent code from executing just by displaying a text. However, clicking a link in a scam text can lead to phishing pages that steal your login credentials, malware downloads that can compromise your device, and fake payment pages that capture your financial information.
The safest approach: if a text seems suspicious, don't interact with it at all. Use a tool like ScanTotal's SMS Scam Analyzer to check it safely without clicking any links.
How to Protect Yourself from Text Scams
Prevention is the best defence. Here's how to reduce your exposure to scam texts. Enable spam filtering on your phone, both iPhone and Android have built-in spam detection features, and Australian carriers like Telstra and Optus have their own scam-blocking tools you should activate. Be sceptical of any unsolicited text with a link, even if it appears to come from a known company. Verify directly by going to the company's official website or app instead of clicking text links. Keep your phone's operating system updated to benefit from the latest security patches. Use strong, unique passwords and enable two-factor authentication on all important accounts. I cannot stress this enough, the fact that scam texts can still impersonate legitimate sender names like "myGov" or "CommBank" in 2026 is an absolute failure of our telecommunications infrastructure, and carriers should be doing far more to authenticate sender identities before messages even reach your phone.
Frequently Asked Questions
Can you get hacked by just opening a text message?
Simply reading a text is generally safe. The risk comes from clicking links, downloading attachments, or calling numbers in the message. Modern smartphones prevent code from executing just by displaying a text.
What should I do if I clicked a link in a scam text?
Change passwords for affected accounts immediately, enable two-factor authentication, monitor bank statements, run a device security scan, and contact your bank if you entered financial information.
How do I report a scam text message?
Forward the scam text to 7726 (SPAM) in the US to help carriers block scam numbers. You can also report to the FTC at reportfraud.ftc.gov. Block the sender and delete the message.
What is smishing?
Smishing is phishing via SMS text messages. Scammers send fake texts pretending to be from trusted entities, banks, delivery services, government agencies, trying to trick you into clicking links or sharing personal information.
What I Do Every Single Time
When I get a text with a link, I don't tap it. Ever. If it claims to be from AusPost, I open the AusPost app. If it says it's from my bank, I log in through the app or call the number on my card. Those three scam texts I got last month? Deleted in under five seconds each, because the pattern is always the same: urgency, a link, and a request for something personal. Once you see it, you can't unsee it. Don't tap. Just check.