Fake Text Message Scam Examples 2026: What They Look Like and How to Spot Them
Text message scams (also called smishing) have exploded in volume. They impersonate the IRS, your bank, shipping carriers, crypto platforms, toll agencies, and more. The messages are getting harder to distinguish from real notifications. This guide shows you exactly what the most common scam texts look like in 2026, what red flags to watch for in each category, and what to do if you receive one.
How to Read This Guide
Each example below is based on commonly reported scam texts. The URLs shown are defanged (brackets added) so they are not clickable. The red flags beneath each example highlight the specific tells that reveal it as a scam. Use this page as a reference whenever you receive a suspicious text.
IRS / Tax Scam Texts
IRS Refund Scam
IRS Notice: Your 2025 tax refund of $3,847.00 has been approved. To receive your direct deposit, verify your banking information at: irs-refund-verify[.]com
Red flags: The IRS never sends texts about refunds. The URL is not irs.gov. Refund status is only available at irs.gov/refunds.
IRS Audit Threat
IRS ALERT: Unusual activity detected on your tax account. Failure to verify within 24 hours may result in penalties. Verify now: irs-account-secure[.]net
Red flags: The IRS communicates by mail, not text. Urgency pressure ("24 hours"). Fake URL impersonating IRS.
Bank / Financial Scam Texts
Suspicious Transaction Alert
Chase: A $499.99 charge at BEST BUY was attempted on your card ending 4821. If this wasn't you, verify at: chase-secure-alert[.]com
Red flags: URL is not chase.com. Real Chase alerts come from short code 72166 and direct you to call the number on the back of your card, never to a website link.
Account Locked
Bank of America: Your account has been temporarily locked due to suspicious login. Restore access: bofa-unlock[.]com/secure
Red flags: Fake URL (not bankofamerica.com). Creates panic to get you to act quickly. Real banks tell you to call their official number.
Zelle / Venmo Payment Scam
Zelle: Someone requested $350.00 from your account. If you did not authorize this, cancel here: zelle-dispute[.]info
Red flags: Zelle notifications come from within your banking app, not via text with external links. The URL is not zellepay.com or your bank's domain.
Shipping / Package Delivery Scam Texts
USPS Failed Delivery
USPS: Your package could not be delivered due to an incorrect address. Update delivery details: usps-redelivery[.]com
Red flags: USPS does not text you unsolicited with links. URL is not usps.com. See our full USPS scam text guide.
FedEx Customs Fee
FedEx: Your international shipment is held at customs. A $3.50 fee is required for release. Pay here: fedex-customs-pay[.]com
Red flags: FedEx does not collect customs fees via text message links. URL is not fedex.com. Small dollar amount is designed to seem low-risk.
Amazon Delivery Issue
Amazon: We were unable to deliver your order #112-3948576-2847362. Confirm your address to reschedule: amzn-delivery[.]info
Red flags: Amazon delivery updates go through the Amazon app and email, not random text links. URL is not amazon.com.
Cryptocurrency Scam Texts
Fake Exchange Alert
Coinbase Security: Unauthorized login attempt detected from Moscow, Russia. Secure your account immediately: coinbase-verify[.]com/login
Red flags: URL is not coinbase.com. Coinbase sends security alerts via the app and email, not SMS with external links. Geographic fear tactic (Moscow).
Free Crypto / Airdrop Scam
Congratulations! You have been selected for the Bitcoin Spring 2026 airdrop. Claim 0.25 BTC now: btc-airdrop-claim[.]org
Red flags: Nobody is giving away free Bitcoin via random text messages. There is no such thing as an official "Bitcoin airdrop." Classic too-good-to-be-true bait.
Crypto security tip: If you hold any cryptocurrency, the best protection against phishing and hacks is keeping your assets in a hardware wallet where your private keys are stored offline. A Ledger hardware wallet keeps your crypto safe even if your phone or computer is compromised.
Affiliate link — we may earn a commission at no extra cost to you.
Toll / DMV / Government Scam Texts
Unpaid Toll Scam
E-ZPass: You have an unpaid toll of $4.15 from 03/20/2026. Failure to pay within 48 hours will result in a $50 late fee. Pay now: ezpass-pay[.]info
Red flags: Toll agencies send bills by mail, not text. URL is not an official toll authority domain. Urgency and late fee threat designed to bypass your judgment.
DMV Registration Scam
DMV Notice: Your vehicle registration expires in 3 days. Renew online to avoid penalties: dmv-renew-fast[.]com
Red flags: Your state DMV sends renewal notices by mail months in advance. URL is not your state's official DMV site. Creates false urgency.
Subscription / Service Scam Texts
Netflix / Streaming Scam
Netflix: Your payment method has failed. Update your billing info within 24 hours or your account will be suspended: netflix-billing[.]com/update
Red flags: Netflix communicates billing issues through email and the app, not text messages with external links. URL is not netflix.com.
Apple ID Scam
Apple: Your Apple ID has been disabled for security reasons. Verify your identity to restore access: appleid-verify[.]com
Red flags: Apple sends account notifications through email or directly on your device, not via SMS with links. URL is not apple.com.
Universal Red Flags Across All Scam Texts
No matter the category, scam texts share these common characteristics:
- The URL does not match the official domain — This is the number one indicator. Always check the actual link destination
- Urgency or threat language — "Act now," "within 24 hours," "your account will be closed," "you will be charged"
- Unsolicited contact — You did not initiate the conversation or sign up for text alerts from this sender
- Requests for personal or financial information — Legitimate companies do not ask for passwords, SSNs, or full card numbers via text
- Small payment requests — $1.95, $3.50, $4.15 — designed to seem too small to worry about, but the real goal is your credit card number
- Generic greetings — "Dear customer" instead of your actual name
- Sent from a regular phone number — Most businesses use short codes (5-6 digit numbers), not standard 10-digit numbers
What to Do When You Receive a Scam Text
- Do not click any links — Not even to "see what happens." Some links can install malware just by loading
- Do not reply — Even replying "STOP" confirms your number is active
- Forward to 7726 (SPAM) — This reports the message to your carrier
- Search the number on Scam.Wiki — See if others have reported the same sender
- Report on Scam.Wiki — File a report to warn others who receive the same message
- Block and delete — Remove the message and block the sender
- Check the real source — If the text claims to be from your bank, log in through the official app or call the number on your card
How to Check If a Phone Number Is a Scam
If you want to investigate the sender's phone number specifically, check our step-by-step guide on how to check if a phone number is a scam. You can search any number on Scam.Wiki to see community reports.
Help Build the Scam Database
Every scam text you report on Scam.Wiki protects someone else from falling victim. Search suspicious numbers, URLs, and messages, or file a report.
Search or Report on Scam.Wiki