Is This Short Code Text Legit? Common 5-Digit Numbers Explained
What Is a Short Code Text Message?
A short code is a 5 or 6-digit phone number used by businesses and organizations to send text messages. Unlike regular 10-digit phone numbers, short codes are specially registered through mobile carriers and are used for things like two-factor authentication codes, delivery notifications, appointment reminders, marketing messages, and alerts.
Short codes are legitimate — but scammers also use them. Knowing the difference is critical.
How Short Codes Work
Businesses apply for short codes through aggregators that work with mobile carriers (AT&T, Verizon, T-Mobile, etc.). There are two types:
Dedicated short codes are exclusively owned by one company. For example, a bank might own a specific 5-digit number used only for their security alerts. These cost $500-$1,000/month and go through a carrier approval process.
Shared short codes are used by multiple businesses through a messaging platform. These are cheaper but less reliable, and some carriers have phased them out due to spam abuse.
The important thing: legitimate short code messages come from registered, carrier-approved numbers. Scam messages often come from regular 10-digit numbers pretending to be short codes, or from short codes that have been compromised or abused.
Common Legitimate Short Codes
Here are some of the most common short codes you might receive texts from. These are generally legitimate:
Banking & Financial:
- Bank of America, Chase, Wells Fargo, and other major banks use dedicated short codes for fraud alerts and verification codes
- Your bank's short code should match what they list on their official website
Delivery & Shipping:
- FedEx, UPS, USPS, and Amazon use short codes for delivery notifications
- Always verify by checking tracking in the official app rather than clicking links in texts
Two-Factor Authentication:
- Google, Apple, Microsoft, and most tech companies send 2FA codes from short codes
- These codes are time-sensitive and you should never share them with anyone
Marketing & Promotions:
- Retailers and restaurants use short codes for promotional offers
- You should have opted in to receive these at some point (signed up, checked a box, etc.)
How to Tell If a Short Code Text Is a Scam
Even legitimate-looking short codes can send scam messages. Here are the red flags.
You never signed up. If you receive a marketing text from a short code you don't recognize and never opted into, it's likely spam or a scam. Legitimate marketing texts only go to people who opted in.
It contains a link. Legitimate short code messages from banks and delivery services generally direct you to use the official app or website — they don't send links. If a short code text includes a URL, especially a shortened one, be cautious.
It creates urgency. "Your account will be closed in 24 hours" or "Respond immediately to avoid charges" — these are pressure tactics. Real companies give you time to respond.
It asks for personal information. No legitimate company will ask you to text back your password, SSN, credit card number, or account details via SMS.
The reply keyword doesn't work. Legitimate short code messages let you reply STOP to unsubscribe. If STOP doesn't work or you get an error, the number isn't properly registered.
How to Look Up Any Short Code
If you receive a text from a short code and want to verify it:
Check the US Short Code Directory at usshortcodes.com — you can search for any short code and see which company registered it.
Google the number. Search "[number] text message" (e.g., "67926 text message"). Other people who received the same text will have posted about it, often confirming whether it's legitimate or a scam.
Check the company's website. If the text claims to be from a specific company, go to that company's official website and look for their listed short codes — usually found in their FAQ, security, or contact section.
Use our scanner. Paste the full text message into ScamSecurityCheck's free scanner for instant AI-powered analysis. Our tool checks the message for known scam patterns, urgency tactics, and suspicious links.
What to Do If You Received a Scam Short Code Text
Don't reply — even "STOP" confirms your number is active to scammers. Don't click any links in the message. Block the number on your phone. Forward the text to 7726 (SPAM) — this reports it to your carrier. Report it at reportfraud.ftc.gov.
If you already clicked a link or entered information, change any affected passwords immediately, enable two-factor authentication on your accounts, and monitor your financial accounts for unauthorized activity.
Frequently Asked Questions
Can short codes be spoofed? Short codes are harder to spoof than regular phone numbers because they go through carrier infrastructure. However, scammers can sometimes abuse shared short codes or use legitimate messaging platforms to send fraudulent messages.
Why did I get a text from a short code I don't recognize? Either a company you have an account with changed their short code, a company sold or shared your number, or it's spam/scam. Look up the number before engaging.
Are all short code texts safe? No. While the short code system has more oversight than regular texting, scam messages still get through. Always verify the sender and never click links or share personal information based on a text alone.
Got a suspicious text? Paste it into our free scam scanner for instant analysis.
Courtney Delaney
Founder, ScamSecurityCheck
Courtney Delaney is the founder of ScamSecurityCheck, dedicated to helping people identify and avoid online scams through AI-powered tools and education.
Learn moreSupport Our Mission
ScamSecurityCheck is built to protect people from online fraud. Your contribution helps us keep building free security tools and resources.
