Is That Text Message Real? How to Spot Fake Delivery, Toll, and Bank Texts

Your phone buzzes. A text says you owe a small unpaid toll, a package couldn't be delivered, or there's a problem with your bank account. It looks official, it's urgent, and it comes with a link. If your stomach dropped for a second, that's exactly what the sender wanted.

Here's what's actually true

Scam texts, sometimes called "smishing" (a blend of SMS, the technical name for text messages, and phishing, which means tricking you into handing over private information), are everywhere. The U.S. Federal Trade Commission reports that in 2025 people filed more than a million reports about imposter scams, meaning someone pretending to be a trusted organization, and said they lost about $3.5 billion to them. Fake toll texts in particular helped drive a jump in reports of scammers pretending to be government agencies.

The good news: these messages follow a very small number of patterns, and once you know them they get easy to spot. You are not foolish for being fooled by one; they are built by professionals to look convincing.

Five giveaways that a text is fake

1. It rushes you. Phrases like "pay within 24 hours" or "your account will be closed" exist to stop you from thinking. Real companies give you time and send letters or emails too.

2. It comes out of nowhere. You never signed up for toll alerts or ordered anything, yet here is a message about one. A delivery text when you aren't expecting a package is a red flag.

3. The link looks slightly off. Scammers register web addresses that resemble real ones, with extra words, odd endings, or misspellings. If the address isn't the company's exact, familiar website, don't trust it.

4. It asks for something sensitive. Banks and government agencies don't ask you to confirm a password, Social Security number, or card number by text.

5. It's vague. "Dear customer" instead of your name, or a generic "your package" with no details, suggests the same message went to thousands of people.

What to do today

Don't tap the link, and don't reply, even with "STOP." Replying tells the sender your number is active, which can bring more messages. Instead, if you think the message might be real, contact the company the way you normally would: type its website address yourself, open its official app, or call the phone number printed on your card or bill. The FTC's advice is exactly this: use contact details you know are real, never the ones in the text.

Then report it, which takes under a minute. Forward the message to 7726 (it spells SPAM on a phone keypad), which helps your wireless carrier block similar messages. You can also use the report option in your phone's messaging app, and file a report at ReportFraud.ftc.gov. After that, delete the text and block the number.

If you already tapped the link

Don't panic; tapping alone usually isn't the problem. The danger is what you type afterward. If you entered a password, change it right away on the real website, and change it anywhere else you used the same one. If you typed in card or bank details, call the number on the back of your card and tell them. If you installed anything or your phone is acting strangely, restart it, update it, and consider asking your carrier or a trusted tech-savvy person to help check it over.

Why these texts work so well

Text messages feel personal and urgent in a way email doesn't, and we tend to read and answer them within minutes. Scammers also send them by the million, so even if only a tiny fraction of people respond, it pays off. They often pick small, believable amounts (a toll of a few dollars) because those feel too minor to question. The takeaway is simple: whenever a message pushes you to act fast, slow down and go to the source yourself.