When a text message looks official

Smishing is a text-message scam that uses a believable story to move you toward a link, reply, payment, or login. The message may say your package needs a redelivery fee, your bank spotted fraud, a family member has a new number, or a toll agency needs payment today. A logo, name, or short code can be copied or spoofed.

Notice the request underneath the story. Unexpected contact, urgency, threats, secrecy, and a demand to use the message’s link or phone number are reasons to pause. You do not need to decide whether the text is definitely fake before choosing not to follow its instructions.

Pause before clicking any link or replying. Open your bank’s app yourself, type a known website, look at a saved delivery account, or find the toll agency’s number on a statement or official source. If the text claims to be from family, call the saved number you already have instead of the new number in the message.

Use a simple sentence: “I am going to pause and call back through a number I trust.” A real organization or loved one can tolerate a verification step. Anyone who insists that you stay inside the original text thread is giving you another reason to stop.

Show the message to someone you trust before you pay, share a code, or enter a password. Together, decide whether to report and delete it, or contact the real provider through an official channel. If you already clicked or shared information, tell the bank, provider, or carrier exactly what happened and when so they can help protect the account.