It all starts so innocently. You get a text saying “Your package couldn’t be delivered. Click here to reschedule.” Little do you know, clicking that link could open the door for scammers to steal your identity, empty your bank account, or even plant malicious software (malware) on your device. Unless you know what to look out for, one little tap on the wrong text could cost you money and peace of mind.
Text scams, also known as smishing (SMS + phishing), are on the rise. These fraudulent messages are sent by cybercriminals and are showing up more often and getting harder to spot. The goal is to get you to give up sensitive personal details that can be used to hack into your accounts, and they are alarmingly successful. The Federal Trade Commission reports that in 2024, consumers lost $470 million to scams that started with text messages.
Watch out for these common scams
Package delivery alerts
Package delivery alerts are the most common text scam. They often impersonate trusted delivery services like UPS, FedEx, and USPS. They claim there’s a delivery problem, then try to trick you into acting quickly by creating a sense of urgency. Because so many of us shop online and have packages delivered regularly, this is a scam that’s easy to fall for. Instead of clicking a link in a suspicious text, go directly to the delivery service’s website and enter your tracking number manually.
Tip: Messages like “Click now to avoid fees” are a red flag that you should make you think twice.
Unpaid toll alerts
These scams claim you have an overdue toll charge and demand that you click a link to make a payment or you’ll be hit with late charges. Don’t do it! These scammers are trying to gather personal data like your driver’s license number and credit card information so they can steal from you. Remember, fake texts are often sent from phone numbers or email addresses you do not recognize, so never click on a link sent from an unknown number.
Bank account alerts
These scams look like they’re from your bank and claim there’s an issue with your funds. You’re asked for sensitive information like bank logins and passwords, which can be used to drain your bank account. They direct you to click a fake link or call a phony number to resolve it.
Tip: Most major banks, including Chase, Wells Fargo and Bank of America, will never ask for personal or account information via text.
Wrong number texts
Wrong number texts are designed to seem like a legitimate accident. They start with a simple text like “Hi Mary, are we still on for Thursday?” and you respond “Sorry, wrong number.” The unknown person then tries to start up a friendly conversation, with the goal of establishing a connection and sometimes even cultivating a romantic relationship. It’s common for these cybercriminals to try and con you into a fraudulent investment like a cryptocurrency scam.
Task scams
Task scams are fake job opportunities. You get a text promising online work with lucrative pay and flexibility. The offer may entail fun tasks like getting paid to shop, but the purpose is to lure you into sharing personal information like your social security number, which can be used to steal your identity. As always, if something sounds too good to be true, it probably is.
Prize or gift card scams
It’s easy to feel lucky if you get a text claiming you’ve won a prize, a gift card or other type of reward. Sadly, many people fall for this type of fraud. These messages appear to be from legitimate retailers like Amazon, Walmart or Target. They say things like “You’ve been selected for a $100 gift card!” and tell you to click a link to claim your prize. These scams often work because they generate a sense of excitement and urgency, but they’re just another way to trick you into clicking and entering personal or payment information. In reality, there’s no prize – just a phishing site or malware ready to steal your data.
Mobile security checklist
Most of us use our phones for everything – banking, shopping, messaging, and storing personal information. That makes them a treasure trove of sensitive data and a high-value target for cyberthieves. Here are some tips to help you strengthen your mobile security against text scams and other types of fraud.
- Don’t click: If you get a text from an unknown sender, do not click on any links. Reach out to the company using a confirmed phone number or website to check if it’s a legitimate message.
- Don’t share: Never share any of your personal or financial information via text. Remember that if someone is asking you to do this, they’re most likely a scammer.
- Fight the fear: Be wary about responding to a text that sounds urgent or threatening. Scammers love to take advantage by creating a sense of fear.
- Stay updated: By keeping your phone’s software up to date, you’ll always have the latest security patches. This is an important tool for protecting against viruses and other malware.
- Stay vigilant: If something seems too good to be true, it likely is. You probably haven’t won that latest iPhone, especially if you don’t remember entering a contest. Always take a moment to think critically before acting.
- Use strong passwords: Long, complex and unique passwords are a cornerstone of mobile security. Webroot solutions include password managers that help you stay safe while simplifying your life.
- Enable two-factor authentication (2FA): Use two-factor authentication on your accounts, especially for banking and email.
- Scan regularly: Scan your device on a regular basis with trusted security software. Whether you’re using Android or iOS, Webroot Mobile Security offers automatic scanning of apps and updates, as well as real-time protection against phishing and malicious websites.
- Use a VPN: Consider usinga VPN (Virtual Private Network) to protect your personal information when you’re on public Wi-Fi. Webroot Secure VPN provides safe browsing and online transactions for enhanced privacy and data security.
Text scams are a sneaky way for hackers to get access on your private data, but you don’t have to fall prey to them. By staying alert to the subtle signs of text scams and arming yourself with the security of Webroot, you can stay safe from the latest mobile threats. Browse, shop, and bank with confidence, knowing that your phone — and everything on it — is protected.
Looking for more information and solutions?
The Strategy Behind Phishing Texts
How to Spot and Report Text Scams
Protect Yourself from Text Scams
