An Unexpected Text? Pause Before You Follow Its Instructions
You do not need to solve a suspicious message from inside the message itself.
A message arrives while you are waiting for a delivery: something needs fixing, and the text supplies a convenient link. Or it claims an account will be restricted unless you respond. The timing may feel plausible. That is not enough to establish who sent it.
The most useful first move is to pause. Do not use the message’s link or phone number to decide whether the message is genuine. Open a trusted app yourself or contact the organization through details you already know are correct.
Separate the claim from the instructions
Read what the message says happened, then notice what it wants you to do. A delivery claim might lead to a request for payment details. An account warning might ask for a password or verification code. Those requested actions deserve more attention than the logo, greeting, or polished wording.
The Federal Trade Commission’s guidance on spam texts describes how messages can use account and delivery stories to obtain personal information. It recommends checking through a known, genuine contact method rather than the information supplied in the text.
You do not have to decide instantly whether every message is a scam. You can decide not to act until you have checked independently.
Practice with three fictional examples
These are made-up situations for illustrating the checking process, not reports of actual messages received by the editors.
“Your package cannot be delivered.” First ask whether you are expecting a package. Then open the retailer’s or carrier’s official app or your existing order confirmation through a trusted route. Compare the order status there. A plausible parcel story does not make the text’s link trustworthy.
“Your account needs immediate attention.” Leave the text and use the organization’s known app or the number on your card or statement. Ask about the account without reading passwords or one-time security codes to someone who contacted you unexpectedly.
“It’s me. I have a new number and need help.” Contact the person through a number or method you already used before this message. A familiar name alone is not enough to establish identity. If you cannot confirm the request, do not let the claimed urgency make the decision for you.
Make independent checking easier in advance
Keep official apps and useful contact details organized so you do not have to search in a hurry. If you use bookmarks, create them from verified sites when you are not responding to an alarming message.
A family conversation can also help: agree that an unexpected request for money or sensitive information will be checked through a separate route. That practice is useful at any age and does not require one person to be the family’s technology expert.
Avoid replying to a suspicious sender just to find out who it is. Use your messaging service’s reporting and blocking tools where appropriate. The FTC’s spam-text guide explains reporting options, including forwarding unwanted texts to 7726 where supported by your carrier.
If you already acted
Respond to what actually happened, without embarrassment. Clicking a link, entering a password, sending money, and installing software are different situations and may need different steps.
Use the FTC’s phishing guidance for the appropriate next action. If financial details or money were involved, contact the relevant institution promptly through a trusted channel. If you disclosed a password, use the real service to secure that account and any other account where you reused it.
Do not continue with someone offering an unexpected “recovery” service. Keep useful evidence without revisiting a suspicious link. Getting help is a practical response, not an admission that you should have known better.
Know someone who would enjoy this?
