How to Spot a Scam Email or Text
Fake delivery texts, bank warnings and “Hi Mum” messages are getting more convincing. Learn the six signs that give scams away, and the one habit that protects you every time.
Never use the link or number in the message
If a message says there's a problem with your bank, delivery, account or tax, don't tap anything in it. Close it, then go to the company yourself: type their website address, open their official app, or call the number on your card or bill. If it was real, you'll see the same message there.
SPOTSix signs a message is a scam
Check any message that asks you to act against these.
“Your account will be closed in 24 hours.” “A warrant has been issued.” “Unusual sign-in detected: act now.” Scammers rush you so you don't stop to think. Real companies rarely threaten immediate consequences by text or email.
- Verification codes: nobody legitimate will ever ask you to read out a code that was texted to you. That code is how scammers break into your account.
- Unusual payment: gift cards, cryptocurrency, wire transfers and payment apps are scammers' favourites because the money can't be recovered.
- Check the actual email address, not just the name. “PayPal Support” <security@paypa1-help.co> isn't PayPal.
- On a computer, hover over a link to see where it really goes. On a phone, press and hold it to preview without opening.
- Watch for look-alike spellings (rn for m, 1 for l) and extra words like
amazon-account-verify.com.
A parcel you didn't order, a refund you didn't ask for, a prize you didn't enter, a job you didn't apply for, or an invoice for something you never bought. Unexpected plus urgent is the classic scam combination.
“Hi Mum, I dropped my phone, this is my new number. Can you help with a bill?” Call the person on their old number, or ask a question only they'd know the answer to, before sending anything.
Generic greetings (“Dear customer”), odd formatting, a logo that looks slightly wrong, or a message from a service you don't use. Trust your instinct and check independently.
See “If you already fell for it” below and act straight away.
HELPIf you already fell for it
Gave a password?
Change it immediately on the real site, and on any other site where you used the same one. Turn on two-step verification.
Paid or gave card details?
Call your bank using the number on your card. They can block the card and may be able to stop or reverse the payment.
Installed something or gave remote access?
Disconnect from the internet, uninstall the app, run a security scan, and change passwords from a different device.
Report it
In the US, report at reportfraud.ftc.gov. Forward scam texts to 7726 (SPAM) to alert your carrier.
FAQCommon questions
I clicked a link but didn't enter anything. Am I OK?
Usually yes. Close the page and don't download anything it offers. If you're worried, run a security scan and keep an eye on your accounts.
How do scammers know my name and where I bank?
Data leaks, social media and public records. Knowing personal details doesn't make a message genuine.
Is it safe to reply “STOP” to a scam text?
No. It confirms your number is active. Just delete it, or report it as junk.
My bank really does text me. How do I tell the difference?
Real bank texts don't ask for passwords, PINs or codes, and you can always check by opening your bank's app or calling the number on your card.