Smishing (SMS Phishing)
Also known as: SMS phishing, text message scam, fake delivery text
Phishing delivered via text message. Common variants include fake USPS/FedEx delivery notices, fake bank fraud alerts, fake toll road bills, and fake IRS warnings — all designed to push victims to click malicious links.
Check if something looks like this scam
Paste any suspicious text, link, or phone number into our scanner.
How it works
Smishing has exploded in recent years as carriers have struggled to filter spam texts. In 2025, Americans received over 225 billion spam texts, and smishing scams now exceed phone-based fraud.
Delivery scams: 'Your USPS package cannot be delivered, reschedule here.' The link goes to a fake USPS site that asks for your address and credit card to 'pay a $0.30 redelivery fee' — stealing your card info in the process.
Bank fraud alerts: 'Chase: A $500 purchase was detected at Walmart. Reply YES to confirm or NO to dispute.' Replying NO triggers a follow-up call from 'Chase fraud department' that walks you through 'securing your account' — meaning transferring funds to the scammer.
Toll road scams: 'EZPass: You have an unpaid toll of $6.75. Pay now to avoid a late fee.' The link is a fake payment page that captures card details.
IRS and government scams: 'IRS: You have an unclaimed refund of $1,247. Click here to verify your information.'
The psychology: Texts feel urgent and personal. Most people check texts immediately. Scammers exploit routine expectations — you probably DO have packages in transit, you DO have a bank account, you DO sometimes drive on toll roads.
Warning signs
- ⚠Unexpected texts about deliveries, fraud alerts, or bills
- ⚠Urgent language with short deadlines
- ⚠Links to unfamiliar domains (especially .top, .shop, .icu, .xyz)
- ⚠Text comes from a long or foreign phone number
- ⚠Request to enter payment info for a small fee
- ⚠Request to verify personal information
- ⚠Promises of refunds, rebates, or prizes
Who does this target?
Where does it happen?
What to do if you've encountered this
- 1.Stop all contact with the scammer immediately. Do not respond, do not send more money, do not try to "reason" with them.
- 2.Document everything — screenshots of conversations, phone numbers, email addresses, websites, and any transaction details.
- 3.If money was sent, contact your bank immediately. Wire and ACH reversals are measured in hours, not days.
- 4.Report the scam to the appropriate agencies:
Warning: After any scam, watch out for "recovery scammers" who promise to get your money back for an upfront fee. They are always a second scam. See our recovery scam warning guide.
Related scam patterns
Phishing
Scammers impersonate legitimate companies (your bank, Amazon, Microsoft, the IRS) via email to trick you into clicking a malicious link, entering login credentials on a fake site, or opening an infected attachment.
Vishing (Voice Phishing)
Phishing over the phone. Scammers call pretending to be from your bank, a government agency, or a tech company, using social engineering to trick you into revealing personal information, financial details, or transferring money.
IRS Impersonation Scam
A scammer calls or texts claiming to be from the IRS, threatening arrest, deportation, or asset seizure for unpaid taxes. They demand immediate payment — usually via gift cards, wire transfer, or cryptocurrency — to avoid 'legal consequences.'
