Text From an Unknown Number? Seven Signs It Is a Scam

WhoCallsMe Editorial TeamPublished 8 min read · 530 words

SMS fraud reuses a handful of scripts. Learn the seven signs and an unknown text becomes easy to categorise in seconds.

Illustration for the guide: Text From an Unknown Number? Seven Signs It Is a Scam

Text messages have overtaken calls as the cheapest way to reach strangers at scale, and the scripts are remarkably repetitive. Once you recognise the seven patterns below, most unknown messages sort themselves within a few seconds.

1. A small fee on a delivery you cannot recall

A package is held, a customs charge is outstanding, a redelivery needs confirming. The amount is deliberately trivial, because the goal is card details rather than the fee. Real couriers put delivery status in their own app and never collect card data through a link in a text.

2. A wrong-number opener

A polite message meant for someone else, then friendly conversation, eventually an investment or trading opportunity. This is a relationship-building script, and it can run for weeks before any money is mentioned. A stranger who continues talking after being told they have the wrong number is following a script.

A suspicious transaction, an account to secure, a code to confirm. Banks send alerts inside their app and never ask you to authenticate through a link in a message. Open your banking app directly and check there instead.

4. A job offer with implausible pay

Remote work, a few hours a day, high daily earnings, apply via a messaging app. What follows is either an advance-fee scheme, a money-mule role or a task-based platform requiring a deposit. Real employers do not recruit through cold text messages with no company, no interview and no contract.

5. A one-time code you did not request

A code arriving unprompted means somebody is attempting a login or a reset with your number. Do not forward it, do not read it aloud to a caller, and change the password on the account it relates to. A code request followed by a phone call claiming to be support is a coordinated takeover attempt.

6. Urgency and secrecy in the same message

Act within the hour, do not discuss this with anyone, your account will be closed. Urgency prevents verification, secrecy prevents a second opinion. Any genuine institution can wait while you call them back on a number you found yourself.

Look at the domain immediately before the first single slash — that is the actual host. Brand names appended as subdomains or paths, hyphenated lookalikes, and shortened links hiding the destination are all deliberate. When in doubt, do not tap; type the official address yourself.

How to check the number behind a text

  1. 1Search the full number in quotes together with the brand it claims to represent.
  2. 2Look the number up for line type, carrier and active status — bulk SMS campaigns run on virtual and VoIP ranges.
  3. 3Compare it with the number your provider actually publishes for notifications.
  4. 4Report and delete: forward to your national spam-reporting shortcode where one exists, then block.

The short version

Never tap a link in an unexpected message, never share a one-time code, and verify every claim inside the company's own app or website. If a texting number still means nothing to you, look it up rather than replying — replying only proves the number is live.

Check the number that called you

Carrier, line type, registered region and spam signals — pulled live, no callback required.

Look up a number

Frequently asked questions

Is it safe to reply STOP to a spam text?
For legitimate marketing, yes — it is a legal opt-out. For fraudulent messages any reply simply confirms your number is active, so block and report instead.
Can I find out who owns the number that texted me?
You can identify the carrier, line type and active status of the number, which is usually enough to tell a real business from a bulk campaign. Personal subscriber names are not published for messaging numbers.
What should I do if I already tapped the link?
Do not enter anything further. If you submitted card or login details, contact your bank through the app, change the password, enable two-factor authentication and watch for follow-up calls claiming to be support.

Keep reading