The Text Scam Costing Americans $470 Million (And the 3-Second Check That Stops It)

That text about a "missed delivery" or an "unpaid toll" isn't just annoying — it's part of one of the fastest-growing crimes in the country. According to the U.S. Federal Trade Commission, Americans lost around $470 million to scams that started with a text message in a single recent year, roughly five times the losses reported just four years earlier. The good news: almost every one of these scams collapses under the same simple check. Here's how to spot them.

What "smishing" actually is

Smishing is simply phishing delivered by text message (SMS + phishing). Instead of an email, a fraudulent message lands in your texts pretending to be a delivery company, your bank, a government agency, or even a stranger who "texted the wrong number." The goal is always one of three things: get you to tap a malicious link, hand over personal or banking details, or send money. The same tricks now show up inside WhatsApp and other messaging apps too.

The 5 scams flooding phones in 2026

Fraud reports cluster around a handful of proven schemes. If you recognize these five, you're already ahead of most victims.

1. The fake delivery notice

A text claiming to be from USPS, FedEx, DHL, or Amazon says there's a "problem" with your package — an incomplete address or a small customs fee — and gives a link to "fix" it. It's the single most reported text scam, and it works because most of us are waiting on something.

2. The unpaid toll trap

A message warns of an outstanding toll balance and threatens a late fee unless you pay "immediately." The FBI has issued specific warnings about these road-toll texts. Real toll authorities don't collect small balances by surprise text with a random link.

3. The bank or account "alert"

"Suspicious login detected." "Your card was used for a $600 purchase — was this you?" These impersonate your bank, Netflix, Amazon, or Apple, hoping panic makes you tap before you think.

4. The "wrong number" opener

A friendly stranger texts as if they meant to reach someone else. If you reply, they strike up a chat over days or weeks, build trust, and eventually steer you toward a fake investment or crypto "opportunity." Never replying is the whole defense.

5. The too-good job offer

An unsolicited text offers easy money for simple online "tasks." These task scams start with tiny fake payouts, then ask you to deposit your own money to "unlock" bigger earnings that never come.

Why today's scams are harder to spot

The old advice — "look for bad spelling" — no longer works. Scammers now use AI to write clean, natural messages, copy real company logos, and build fake websites nearly identical to the originals. Some even spoof a real business phone number. In other words, a scam text can look completely legitimate. That's why you can't rely on how a message looks anymore. You have to rely on how it behaves.

The 3-second check that stops them

Before you tap anything, ask one question: "Did I expect this, and is it pressuring me to hurry?" Almost every scam fails this test, because two ingredients are nearly always present:

• It arrived out of the blue — a delivery you didn't order, a bank you don't use, a toll you never crossed.
• It manufactures urgency — a deadline, a fee, a threat of your account being locked. Urgency exists to stop you from thinking.

If both boxes are checked, treat the message as a scam. Then verify independently: instead of tapping the link, open the company's official app or type its real website address yourself. Legitimate organizations are fine with you taking your time — scammers are not.

What to do if you already clicked

Don't panic — act quickly:

• If you entered banking or card details, call your bank using the number on the back of your card and freeze or flag the account.
• If you typed a password, change it right away — and everywhere else you reused it.
• Turn on two-factor authentication on your important accounts so a stolen password alone isn't enough.
• Watch your statements for the next few weeks and dispute anything unfamiliar.

How to block and report

You can forward suspected spam texts to 7726 (it spells "SPAM") to alert your carrier, then block and delete the number. In the U.S., report the scam to the FTC at reportfraud.ftc.gov. Reporting helps investigators track new waves before they reach your family.

One more habit worth building: if a message ever seems to come from someone you know but sounds off, verify it another way. That same instinct protects you from an even newer threat — AI voice-cloning scams, where criminals fake a loved one's voice on a phone call.

Frequently asked questions

How can I tell if a text is a scam?

Watch for three signs together: it's unexpected, it pressures you to act fast, and it contains a link or a request for personal information. Legitimate companies rarely combine all three.

Is it safe to reply "STOP" to a scam text?

No. Replying anything — even "STOP" — confirms your number is active and can bring more scams. Block and delete instead, and forward it to 7726.

What if I already tapped the link?

Tapping alone is usually less dangerous than entering information. If you typed a password or payment details, change passwords and contact your bank immediately, then enable two-factor authentication.