What do spam and scam text messages look like?
Direct Answer
What do spam and scam text messages look like? Most scam texts fall into a handful of patterns: a package that cannot be delivered, a toll or fine that is overdue, a fraud alert from your bank, a job that pays for simple online tasks, and a friendly message that seems to have reached the wrong person.
The FTC's 2025 Data Spotlight named those five as the most reported text scams of 2024, a year in which people reported losing $470 million to scams that started with a text.
Almost all of them ask for one of three things: tap a link, reply, or call a number. The request is the part that matters, far more than the wording around it.
Plain spam is different from a scam. An aggressive marketer you never signed up with is annoying, but it wants a purchase, not your password or your bank details.
Why This Problem Exists
- Scam texts are cheap to send in bulk, and one success pays for thousands of failures.
- A text has no visible sender address, no domain and no security banner, so there is very little to inspect before deciding whether to trust it.
- The patterns borrow the exact situations people deal with every week: deliveries, tolls, bank alerts and job searches.
- Phone numbers rotate constantly, so a number that looked safe yesterday says nothing about the next message.
- The wording keeps changing to slip past filters, while the underlying request stays the same.
How It Works Today (Current State)
- Delivery texts claim a package is on hold because of an incomplete address or an unpaid fee, and link to a page asking for card details.
- Toll texts claim an unpaid balance with a small amount due and a larger late fee if you wait. The FBI's Internet Crime Complaint Center warned about this pattern in April 2024 after more than 2,000 complaints in about a month.
- Bank alert texts ask whether you approved a purchase and push you to reply or call a number that belongs to the scammer, not the bank.
- Job texts offer easy pay for rating products or completing online tasks, then ask you to deposit money to unlock your earnings.
- Wrong number texts open with a casual greeting meant for someone else, then turn into a friendly conversation that later moves toward romance or an investment.
- Marketing spam usually names a real brand you have never shopped with and includes an opt-out keyword. It is unwanted, not necessarily fraudulent.
Better Approach (Actionable Framework)
- Judge the request, not the story. Any text that asks you to tap, reply or call about money, an account or a delivery deserves a second look.
- Check through a channel you already trust: the official app, the number on the back of your card, or the website you type in yourself.
- Treat urgency as a warning sign. Real organizations rarely give you minutes to act.
- Never send a one-time passcode to anyone who texts or calls asking for it.
- Report the message before deleting it, so the carrier and the impersonated organization learn about it.
Key Takeaways
- Five patterns cover most scam texts: delivery, toll, bank alert, job and wrong number.
- The request (tap, reply or call) is the tell, not the wording.
- Spam wants a sale. A scam wants your money, your login or your trust.
- Verify through a channel you already have, never through anything inside the message.
Where SmishAlert Fits
On iPhone, SmishAlert screens texts from unknown senders before anyone taps anything and moves likely scams out of the inbox.
For messages it cannot screen, such as iMessage threads or apps other than Messages, reporting is one tap on a screenshot or a forward, and it comes back with a plain verdict and the reasoning behind it.
When a message or link is confirmed malicious, the next unknown-sender check on any protected iPhone marks it automatically.
An individual can install SmishAlert on their own iPhone from the App Store.