Smishing: how to spot a scam text message
Scam texts - "smishing" - are everywhere: a missed parcel, a toll you owe, a suspicious charge. Here is how to tell a fake from the real thing.
What is smishing?
Smishing is phishing by text message (SMS). Instead of an email, you get a text that pushes you to click a link or call a number - usually with a sense of urgency. Texts feel personal and immediate, which is exactly why scammers use them.
Common scam texts
- "Your parcel could not be delivered." A link asks for a small "redelivery fee" and your card details.
- "Unpaid toll / fine." A link to "pay now and avoid penalties."
- Bank or Interac alerts. "Suspicious transaction - confirm here." The link goes to a fake login page.
- "You've won" or refund messages. A prize or tax refund waiting behind a link.
- Wrong-number "friendly" texts. A stranger strikes up a chat that slowly turns into an investment or romance scam.
How to spot a fake text
- An unexpected link. Legitimate companies rarely text you a link to log in or pay.
- Urgency and threats. "Act within 24 hours" or "your account will be suspended."
- A shortened or odd link.
bit.ly/...or a domain that is not the company's real site. - A number you do not recognize, or a message that does not address you by name.
What to do
- Do not tap the link. If you think it might be real, go to the company's official app or website yourself.
- Check the link first. Paste the address into our Link Checker to see where it really leads before you click.
- Do not reply - even "STOP" tells a scammer the number is active.
- Report and delete. In Canada you can forward scam texts to 7726 (SPAM) and report to the Canadian Anti-Fraud Centre.
If you already entered details, change that password and call your bank if card or banking info was involved. See our I've been scammed guide for the full steps.
Try it yourself