86528 FedEx: Your package is pending delivery. Update delivery preferences: http://fedex-delivery.co/update
Introduction to SMS and Text Message Scams
Text messages (SMS) have become a popular way for scammers to target people. Unlike email, text messages often feel more urgent and personal. Many people read and respond to texts almost immediately, which is exactly what scammers are counting on. In this module, we'll learn how to identify suspicious text messages and protect ourselves from SMS scams.
Why SMS Scams Are Effective
Text message scams are particularly effective for several reasons:
- Immediacy: Most people check text messages within minutes of receiving them
- Trust: People tend to trust text messages more than emails
- Limited information: The small screen and brief nature of texts make it harder to spot red flags
- Easier to fake: It's relatively simple for scammers to send texts that appear to come from legitimate organizations
- Direct access: Text messages go straight to your personal device
Common SMS Scam Types
1. Package Delivery Notification Scams
These text messages claim to be from delivery services like FedEx, UPS, or Amazon, saying there's an issue with a package delivery that requires your immediate attention.
Red Flags:
- The link doesn't go to the official FedEx website (fedex.com)
- The message doesn't include a tracking number
- You aren't expecting a package
- The message creates urgency
Protection Tip:
If you're expecting a package and receive a text about it, don't click the link. Instead, go directly to the official delivery company's website and enter your tracking number there. Or call the company using their official phone number.
2. Bank Alert Scams
These texts claim to be from your bank or credit card company, warning about suspicious activity or problems with your account.
ALERT: Your CHASE bank account has been suspended due to suspicious activity. Verify your identity: http://chase-secure-verify.com
Red Flags:
- Banks rarely send texts about account suspensions
- The link isn't to the official bank website (chase.com)
- The message creates fear and urgency
- The text doesn't include your name or partial account number
Protection Tip:
If you're concerned about your bank account, call the number on the back of your bank card or visit your local branch. Never call numbers or click links provided in unexpected text messages.
3. "Wrong Number" Conversation Starters
This is a newer type of scam where someone texts you pretending they've reached a wrong number, then tries to start a friendly conversation that eventually leads to a scam.
Red Flags:
- Stranger continues conversation after being told they have the wrong number
- They ask personal questions
- The conversation quickly becomes friendly
- Eventually leads to discussing investments, cryptocurrency, or dating
Protection Tip:
If someone texts you by mistake, it's fine to let them know they have the wrong number. But if they continue the conversation, stop responding. Block the number if they persist.
4. Contest Winner Notifications
These texts claim you've won a prize or gift card from a well-known company, even though you never entered any contest.
CONGRATULATIONS! You've been selected to receive a $1,000 Walmart gift card! Claim now (limited time offer): http://walmart-rewards.co/claim
Red Flags:
- You can't win a contest you didn't enter
- The link isn't to the official company website (walmart.com)
- Creates false urgency with "limited time offer"
- Offers seem too good to be true
5. "Account Verification" Texts
These texts claim to be from popular services like Netflix, Amazon, or Apple, saying your account needs verification or your payment failed.
Netflix: Your payment method has expired. To avoid service interruption, update your information here: http://netflix-accounts.co/update
Red Flags:
- The link isn't to the official service website (netflix.com)
- Creates urgency with threat of service interruption
- Most legitimate services email rather than text about billing issues
- Doesn't include your account name or other identifying information
Suspicious Links in Text Messages
Links in text messages are particularly dangerous because:
- On a small screen, it's harder to see the full URL
- Mobile browsers may not show the full web address
- Shortened URLs (like bit.ly links) hide the actual destination
- Tapping is easier than clicking, making accidental interactions more likely
Link Safety Tips:
- Never tap links in unexpected text messages
- If you think a message might be legitimate, contact the company directly through their official website or phone number
- Be especially cautious of shortened links (bit.ly, tinyurl, etc.)
- Remember that legitimate companies have no reason to send important information through suspicious links
Legitimate vs. Suspicious Shortcodes
Many legitimate businesses use "shortcodes" (5-6 digit numbers) to send text messages. Here's how to tell the difference:
Legitimate Shortcode Texts:
- Come from 5-6 digit numbers that you've interacted with before
- Are expected (you signed up for alerts or verification codes)
- Don't create false urgency
- Don't ask for personal information
- Often include opt-out instructions (like "Reply STOP to unsubscribe")
- Example: "Your Amazon verification code is 123456. Don't share this code with anyone."
Suspicious Shortcode or Regular Number Texts:
- Come from numbers you don't recognize
- Are unexpected
- Create urgency or fear
- Contain suspicious links
- Ask for personal information
- Offer unexpected rewards or prizes
What to Do When You Receive a Suspicious Text:
Follow These Steps:
- Don't click any links in the message
- Don't reply to the message (this confirms your number is active)
- Don't call any phone numbers included in the message
- Block the number through your phone's blocking feature
- Report the message as spam (on iPhones, you can forward the message to 7726 (SPAM); on Android, use the "Report spam" feature)
- If you think the message might be legitimate, contact the company directly using their official website or phone number
- If you've already clicked a link or provided information, monitor your accounts closely and consider changing passwords
Text Message Safety Practice
Let's practice identifying text message scams. Look at these examples and see if you can spot the warning signs:
Example 1:
"Your Apple ID was used to sign in to iCloud on a new iPhone. If this wasn't you, click here: http://apple-id-verify.co"
Red Flags: The link is not to apple.com (it is to apple-id-verify.com, which is fake); It creates fear and asks you to click a link.
Example 2:
"Your prescription is ready for pickup at Walgreens on Main St. Store hours: 8am-10pm."
Likely Legitimate: No links, no requests for information, provides specific details, doesn't create urgency