11 Oct 2023

How to spot a text message scam

Messaging scams can be very convincing, so it’s important to know how to spot these scams

Which?Editorial team

From scammers impersonating the government offering non-existent discounts on energy bills to pretending to be your adult children hoping to coerce you into transferring money, we've seen it all.

Scam messages are engineered to steal your personal details to con you now or in the future. We've seen scam messages on most messaging platforms, such as SMS, WhatsApp, Facebook Messenger, Viber and Skype.

By using identity masking technology to change the name displayed as the sender, scammers often make it look like a legitimate organisation is contacting you via text or a messaging app. This is known as ‘number spoofing’.

Sign up for scam alerts

Our emails will alert you to scams doing the rounds, and provide practical advice to keep you one step ahead of fraudsters.

How can you spot a scam message?

Scammers are getting more cunning at making messages look like the real thing.

Here is an example of a scam text impersonating the DVLA, it claims the agency requires 'confirmation of your driver's licence record'. The text leads to a phishing website.

While these scam messages might appear legitimate at first, there are ways to spot the scam.

1. Message from an unknown number

Most organisations protect their 'Sender ID' so text messages should be from 'HSBC' or 'Royal Mail' instead of a generic phone number.

Don't always trust the number though as Sender ID names can be hijacked on smartphones.

If in doubt, contact the organisation directly using a verified number from the organisation's official website.

2. Requests for payments or details

Genuine organisations rarely ask you to pay or make account changes via text message without first logging into your account. If you're being asked for sensitive information, it's best to contact the organisation directly yourself using official channels.

3. Fake website address

Does the website address match that of the organisation? Make sure the website link belongs to that of the organisation's official domain, such as gov.uk for a government organisation like the DVLA.

Always look up an organisation's details independently to double-check the details.

Find out the seven ways to spot a scam website

4. Spelling errors and odd wording

Banks, government departments and couriers will rarely make spelling or grammatical errors. If the message doesn't make sense, it's a strong giveaway that it's a scam.

Key Information

Spot a scam bank message

If you get a message claiming to be from your bank, always treat this with caution.

Your bank should never:

Ask for your Pin or internet banking password.
Send someone to your home to collect cards or banking information.
Ask you to email or text personal or banking information.
Email a link where you have to then input your internet banking details.
Ask you to authorise a funds transfer which you haven’t requested.
Tell you to invest in diamonds, land or other commodities.
Ask you to carry out a test transaction.
Send you to a mobile app other than their own official app.

If you receive an unexpected message from your bank and you're concerned whether it's genuine or not, you can call your bank back via an official telephone number printed on the back of your debit or credit card.

How to avoid message scams

Here are a few tips to help you avoid message scams.

1 Don't follow any links

This is the most effective way to avoid text scams. Links can take you to cloned websites designed to steal your money or personal data. Because links are often shortened to help them fit into the message, it’s not always easy to tell the real ones from the fakes. Clicking on links could also lead you to download malware - malicious software that can take over your phone and access your data.

2 Don't share personal information

Treat all messages requesting sensitive information - or that link you to websites asking for personal details - with suspicion. Legitimate organisations will never text you to ask for your personal or banking details upfront.

3 Contact the organisation directly if you're unsure

If you're not sure if a text is real, contact the company that claims to have sent it to check. Use the official contact details listed on the company’s website or documents you might have been sent, if it's your bank then you can usually find its official number on the back of your credit or debit card.

4 Don't reply

Replying to a fake text, calling the number it’s been sent from or clicking through on suspicious links only lets the scammers know your number is being used. You might be bombarded with even more scam messages and calls. The number has likely been spoofed anyway, which means you’ll probably only be messaging an innocent member of the public who has had their number stolen.

5 Report it

You report scam texts by forwarding the message to 7726 - a free reporting service provided by phone operators. This information is then shared with the police and intelligence agencies working to stop text scams. If you've fallen victim to a text scam, you can report it to Action Fraud, or the police if you live in Scotland.