How to tell if a text message is a scam
Most scam texts share the same few tricks. Learn the signs, how to check a message with the real organisation, and how to report it for free.
- Written by
- Digital Life Check editorial team
- Reviewed by
- Not yet independently reviewed
- Last checked
On this page
Quick answer: if an unexpected text wants you to tap a link, pay something, or share a code or personal details — and it is trying to hurry you — treat it as a scam until you have checked it yourself. Don't reply. Forward it to 7726, then delete it.
If you have already tapped the link, read what to do if you clicked a scam link first.
The five warning signs
The National Cyber Security Centre (NCSC) lists five tricks scammers rely on. Most scam texts use at least two.
- Authority — it claims to be from your bank, a courier, the NHS, HMRC or another official body.
- Urgency — "within 24 hours", "today", "your account will be closed".
- Emotion — it tries to make you panic, worry, hope or feel curious.
- Scarcity — something in short supply: a refund, a prize, a limited offer.
- Current events — it ties itself to the news, tax deadlines or the time of year.
A few more clues from Which?:
- A link. Which? says not following links is the most effective way to avoid text scams. Links are often shortened, so you can't easily tell where they lead.
- A request to pay or update details. Genuine organisations rarely ask you to pay or change account details by text.
- Odd wording or spelling mistakes. These are a giveaway, although many scam texts are now well written.
- An unfamiliar sender. Scammers can fake the sender name so a text shows up as a real company. A familiar name is not proof.
Common UK scam texts
Parcel and delivery texts
"We missed you", "your parcel is on hold", "pay a small fee to rebook". These lead to a fake site that takes your card details. If you are expecting something, go to the courier's own website or app and enter your tracking number there.
Bank texts
"A payment has been blocked — call us on this number" or "confirm this transaction". The number in the text goes to the scammer. Which? says your bank should never ask for your PIN or online banking password, never ask you to authorise a transfer you didn't request, and never ask you to text or email your personal or banking details.
To check, call your bank on 159 or the number on the back of your card. 159 is a short number set up by Stop Scams UK that connects you to your own bank. It never calls you.
HMRC and tax refund texts
HMRC does send texts to some people, but it says it will never ask for personal or financial information by text, and it will never text you about a tax rebate. A text offering you a tax refund is a scam. HMRC asks you to forward suspicious texts to 60599 (charged at your network rate) as well as 7726.
"Hi Mum" or "Hi Dad" texts
A message from an unknown number: "Hi Mum, I've broken my phone, this is my new number". It soon turns into an urgent request for money, often to "a friend's account". These come by text and WhatsApp.
- Don't send anything yet.
- Call your family member on the number you already have saved for them.
- If you can't reach them, ask a question only they would know the answer to.
Which? suggests agreeing a family code word in advance for exactly this situation. Our guide to protecting older parents from scams explains how to set one up.
"Send me the code" texts
If someone asks you to pass on a code that has just been texted to you — even a friend's account asking for a "verification code" — don't. That code is often what lets them take over your account. See what two-factor authentication is and why codes are never for sharing.
How to check if a text is real
- Don't use anything in the message. No links, no phone numbers, no reply.
- Contact the organisation yourself. Use its official app, the website you normally type in, or the number on your card or a recent bill.
- Log in to your account directly. If there is really a problem, you will usually see it there.
- For your bank, call 159.
Still unsure? Run it through our Scam Check.
How to report a scam text
Forwarding to 7726 is free and reports the message to your mobile provider. Most UK phone providers are part of the scheme.
On iPhone
- Note the sender's number.
- Press and hold the message, then tap More.
- Tap the forward arrow (bottom right).
- Enter 7726 and send.
On Android
- Note the sender's number.
- Press and hold the message.
- Tap the three dots (top right), then Forward.
- Enter 7726 and send.
Then block the number and delete the text.
If the text claims to be from HMRC, you can also forward it to 60599.
If you have lost money or shared details
- Bank or card details: call your bank now on 159 or the number on your card.
- Lost money or been hacked: report it to Report Fraud (the service that replaced Action Fraud) at reportfraud.police.uk (opens in a new tab) or on 0300 123 2040. In Scotland, call Police Scotland on 101.
Sources
- How to spot a scam email, text message or call — National Cyber Security Centre (opens in a new tab)
- Report a scam text message — National Cyber Security Centre (opens in a new tab)
- Avoid and report internet scams and phishing — GOV.UK (opens in a new tab)
- Report suspicious HMRC emails, texts, social media accounts and phone calls — GOV.UK (opens in a new tab)
- Check if a text message you've received from HMRC is genuine — GOV.UK (opens in a new tab)
- How to spot a text message scam — Which? (opens in a new tab)
- How to spot a WhatsApp scam — Which? (opens in a new tab)
- Stop, hang up, call 159 — Stop Scams UK (opens in a new tab)
Last checked: 22 September 2026