How to Spot Scam Texts and WhatsApp Scams Before You Lose Money

Your phone buzzes. A text says a package could not be delivered, or you owe an unpaid toll, or your bank has spotted suspicious activity. It looks official, and it wants you to tap a link right now.

Scam texts, sometimes called smishing (SMS phishing), have become one of the most common ways criminals try to steal money and personal information. WhatsApp and other messaging apps get the same treatment, often with a more personal twist.

The good news is that most scam messages follow a handful of patterns. Once you know them, they become much easier to spot. This guide walks you through the most common tricks, the settings that help, and exactly what to do if you have already clicked.

The red flags almost every scam shares

Before looking at specific scams, learn the warning signs. Most scam messages include at least one of these:

• Urgency. "Pay within 24 hours," "your account will be suspended," "I need this today."
• A link or a phone number to contact. The goal is to get you onto a fake website or a call with a scammer.
• A request for money, codes or personal details. Especially gift cards, wire transfers, cryptocurrency or payment apps.
• An unknown number. Often with an odd format, an international code or a random email address as the sender.
• Something slightly off. A strange web address, awkward wording or a greeting that does not use your name.

If a message pushes you to act fast, slow down. Real organizations can wait for you to check.

Fake delivery texts

These messages claim a package is held up and ask you to "confirm your address" or pay a small redelivery fee. The link leads to a convincing copy of a delivery company's website, where you are asked for card details.

According to the US Postal Inspection Service, USPS does not send text messages or emails unless you have signed up for tracking alerts with a specific tracking number, and even then the message will not contain a link.

What to do: do not tap the link. If you are expecting a package, go to the retailer's website or app, or type the delivery company's address into your browser yourself.

Unpaid toll scams

The FTC and the FBI have both warned about texts claiming you owe money for unpaid tolls, often using names such as E-ZPass or a state toll agency. The message threatens late fees and includes a payment link.

These texts are sent at huge scale, so they reach people who have never used that toll road. The real risk is that you enter your card details on a fake payment page.

What to do: do not click. If you are worried, look up your toll agency's official website or phone number yourself and check your account there.

"Hi Mom" and "Hi Dad" family scams

This one is especially common on WhatsApp. A message arrives from an unknown number: "Hi Mom, I broke my phone, this is my new number." After some friendly back and forth, the "child" suddenly needs money urgently, often to pay a bill because their banking app does not work on the new phone.

It works because it plays on love and worry. The scammer is betting you will want to help before thinking it through.

What to do: call your child or relative on the number you already have saved. If they do not answer, contact someone else who can confirm. Many families agree on a code word for real emergencies. Never send money or share a code until you have verified who you are talking to.

Other scams to know about

• Bank "fraud alert" texts. They claim suspicious activity and ask you to call a number or log in via a link. Your bank will not ask for your password or a one-time code by text. Call the number on the back of your card instead.
• Verification code scams. Someone asks you to forward a six-digit code "sent by mistake." That code may be the key to taking over your WhatsApp or another account. Never share it.
• Wrong-number texts. A friendly message meant for "someone else" turns into a chat, then a friendship, then an "investment opportunity" often involving cryptocurrency. These scams can go on for weeks and cost victims large sums.
• Job offers and prizes. Easy remote jobs with high pay, or prizes you never entered to win, usually end with a request for money or personal details.

Settings that help block scam messages

Your phone and your messaging apps have built-in protections. They will not catch everything, but they help.

On iPhone:

• Go to Settings > Apps > Messages (on older versions, Settings > Messages) and look under Message Filtering for the unknown senders option. On recent iOS versions, messages from unknown numbers can be moved into a separate list without notifications.
• When you receive a spam message, tap Report Junk under the message to report and delete it.

On Android (Google Messages):

• Open Google Messages, tap your profile picture, then Messages settings > Spam protection and make sure it is on. Google has also added scam detection that can warn you about suspicious conversations.
• Long-press a conversation and choose Block and Report spam.

On Samsung Messages, open the conversation, tap the menu and choose Block and report spam, or look in Settings > Block numbers and spam.

In WhatsApp:

• Turn on two-step verification in Settings > Account > Two-step verification. It adds a PIN that protects your account even if someone gets your code.
• Go to Settings > Privacy > Groups and limit who can add you to groups.
• Go to Settings > Privacy > Calls and turn on Silence unknown callers.
• To report a chat, open it, tap the contact's name or number at the top, and choose Report.

Common scams at a glance

Scam	Typical message	What they want	Safe response
Fake delivery	"Your package is on hold, update your address"	Card details	Check with the retailer or carrier directly
Unpaid tolls	"Pay your outstanding toll balance to avoid fees"	Card details	Check with your toll agency's official website
Hi Mom / Hi Dad	"New number, can you help me pay a bill?"	Bank transfer	Call your family member on their saved number
Bank fraud alert	"Suspicious charge, confirm your account"	Login details, codes	Call the number on your card
Verification code	"I sent you a code by mistake, please forward it"	Account takeover	Never share codes
Wrong number	"Hi, is this Sarah? Sorry, wrong number!"	Long-term trust, then investment	Do not reply, block and report

How to report scam texts in the US

Reporting helps phone carriers and authorities block scammers and warn others.

1. Forward the text to 7726 (it spells SPAM). This free service is supported by major US carriers. You may be asked for the number that sent it.
2. Report to the FTC at ReportFraud.ftc.gov. The FTC uses reports to track scams and support investigations.
3. Report in the app. Use Report Junk, Report spam or WhatsApp's Report option.
4. Report online crime to the FBI at ic3.gov, especially if you lost money.

Then delete the message.

What to do if you already clicked or paid

It happens to careful, smart people. Acting fast can limit the damage.

• If you paid by card or bank transfer, call your bank or card issuer immediately using the number on your card. Ask them to stop or dispute the payment.
• If you paid with a gift card, contact the company that issued the card right away and tell them it was used in a scam.
• If you entered a password, change it straight away, and change it anywhere else you used the same one. Turn on two-factor authentication.
• If you shared personal information such as your Social Security number, visit IdentityTheft.gov for a step-by-step recovery plan, and consider a free credit freeze with the three credit bureaus.
• If you installed an app from a link, uninstall it and run a security check.

Money sent by wire transfer, gift card or cryptocurrency is often very hard to recover, so do not believe anyone who contacts you later promising to get it back for a fee. That is usually a second scam. For legal questions about a loss, speak to a qualified attorney.

FAQ

Can I get hacked just by opening a scam text?

Simply reading a text is generally low risk. The danger comes from tapping links, downloading attachments, replying or calling the number.

Should I reply "STOP" to scam texts?

For obvious scams, it is better not to reply at all. A reply confirms your number is active. Report and delete instead.

Is it safe to click the unsubscribe link?

Not in a suspicious message. Use your phone's block and report tools instead.

How do scammers get my number?

Numbers can come from data breaches, public listings or simply random dialing. Getting a scam text does not mean you did anything wrong.