Spam Text Messages
We’ve all gotten them. It’s what you do about them that makes all the difference.
“Your checking account has been frozen!” “Your delivery is delayed!” “You have $2,000 in unclaimed money!” We’ve all seen texts like these and, while most of us can recognize them as the scams they are—the bad guys are getting increasingly better at making them look legitimate. That means more and more people are becoming victims of smishing or one of the many other scams.
Even if they’re just harmless ads, they’re still annoying and distracting. We’ll take a closer look at spam texts, including how to identify the suspicious kind, and how to stop them.
What is a spam text?
In the past, telemarketers and robo-callers were the only annoying unwanted communication we received on home phones and mobile devices. However, thanks to technology, pretty much everyone with a mobile phone is now also receiving unwanted text messages from businesses and organizations they’ve never heard of. These unwanted messages are called spam texts.
Just like telemarketers or robocalling companies, individuals and organizations either buy lists of mobile phone numbers from third party sellers or use technology to randomly generate lists of numbers and mass text them, hoping to stumble on a few correct guesses. However, sometimes even legitimate businesses send spam texts you didn’t ask for, since many have access to your phone number as part of your account information.
What is smishing?
You’ve probably heard of phishing, which is when a seemingly reputable company sends an e-mail in an attempt to gain access to your personal information. Smishing is similar. Smishing is a type of cyber-attack that involves sending text messages to individuals with the intent of tricking them into divulging personal or sensitive information or downloading malware onto their devices. The term "smishing" is a combination of the words "SMS" (short message service) and "phishing."
How do smishing and spam texts work?
Much like e-mail phishing attempts, smishing messages usually appear to come from a legitimate source, such as a bank or a government agency. These fraudulent texts usually include a link to a website that looks like the real thing. Once you click on the link, however, you may be asked to enter personal information, such as passwords or credit card numbers, or to download an app or file that contains malware. So, for instance, if you get a text message claiming that you’ve been gifted an Amazon gift card, it’s best not to click the link, since that text is likely a smishing scam.
The difference between smishing and spam texts
While all smishing texts are spam, not all spam texts are smishing scams. Smishing texts are sent with the express purpose of tricking you into divulging your personal information or downloading malware to your phone. To do this, smishing scammers will send texts saying that you’ve won a prize, that your bank account has been suspended, or that they are a government agency, like the IRS, attempting to contact you, among other messages meant to get you to click a link or expose your device to malware.
Spam texts aren’t always smishing scams—they could just be unwanted texts from legitimate businesses. As many businesses look for new ways to connect with customers, such as SMS, they also send unwanted text messages. Some businesses even buy lists of mobile phone numbers from third-party sellers and promote their services to people who have never actually signed up for texts. Registered voters also might receive spam texts from politicians and charities seeking donations. While annoying, these texts aren’t scams. Legitimate businesses, charities, and political organizations will include directions to reply “STOP” to end communication.
Tips for recognizing smishing and spam text messages
It can definitely feel unnerving and annoying to get unwanted texts to your private number, but there are ways to quickly and easily spot suspicious text messages. Here are a few tips for identifying spam text messages:
- You don’t recognize the number: One type of smishing text looks like it might have come from an acquaintance and reads something like “Bill gave me your number. Check out my profile here.” These texts rely on common names to get recipients to follow shady links.
- There’s a dire warning: If you get a text saying that “Your account has been locked” or that a government agency is trying to contact you, it’s almost certainly a smishing scam, especially if you haven’t received communication via e-mail, postal service, or a phone call.
- There’s a prize offer: Everyone likes to win. However, if you receive a notification of winning a prize with a link included, it’s probably a scam.
- There’s an offer to help pay off debt: One popular smishing scam involves offering student debt relief. While it can be tempting to see if these claims are legit, links include will likely ask for sensitive personal information.
- There’s a notification about package delivery: Since many of us shop online on a regular basis, this smishing scam is easy to fall for. Remember that a legitimate company will identify itself and provide an order number and tracking code. Make sure to check for these indicators and check order numbers against your own records before clicking any links included in the text.
How to report suspicious text messages
If you receive a text message you think might be a smishing or spam text messages, you can help others by reporting it. Reporting these texts will help your service provider and government agencies better identify scammers. Here are some tips for reporting spam text messages:
- Copy and forward the message to 7726 (SPAM). This helps your service provider keep records of and block fraudulent messages.
- Report the message to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov
How to protect yourself and your personal information
There are a few ways you can protect yourself against smishing and spam text messages:
- Don’t click links from unknown numbers.
- Double check the information in text messages. For example, if you get a message claiming to be from FedEx about your package, double check the tracking number against your own records to make sure it’s legitimate.
- Don’t give out account information. No legitimate company or government organization will ask you to give out sensitive information, account numbers, or passwords via text message.
- Call the company. If you receive a text message that seems legitimate but you’re not sure, it never hurts to call a customer representative before clicking a link or giving any personal information.
- Block and report. On most mobile devices, you can easily block and report spam text messages from your messaging app. In iMessage, touch and hold the spam message, then tap Report Junk. Or, if you’ve opened the message, scroll to the bottom of the message, tap Report Junk, then tap Delete and Report Junk. For Android, and hold the conversation you want to report, then tap Block Report spam.
- Enable filters on your mobile device. Apple and Android mobile devices provide spam filters for text messages. On an Apple device, go to Settings and tap Messages. From there, turn on Filter Unknown Senders. For Android, go to the Messaging app and tap the three dots icon in the upper right-hand corner of the screen. Tap Settings and then tap Spam Protection. Turn on Enable Spam Protection.
- Check with your mobile provider. Many carriers offer free tools for spam text message protection. Check with your carrier for options.
Digital security can be tricky when identifying and blocking scammers seems like playing a game of Whack-A-Mole, with more spam text messages appearing each time you block. However, you can keep yourself safe by identifying suspicious text messages, never clicking a text link from a number or business you don’t recognize, and reporting smishing texts each time you receive a new one.
FAQs
What are spam text messages and how do they harm your device?
Smishing and spam text messages appear to be messages from businesses or acquaintances but can include links to websites that will install malware on your phone or mobile device.
How can you identify a spam message?
Fraudulent messages often appear to be from legitimate businesses or government agencies. However, no legitimate business or government organization will ask for account or other personal information via text.
What is Smishing and how does it work?
Smishing is a type of cyber-attack that involves sending text messages to individuals with the intent of tricking them into divulging personal or sensitive information or downloading malware onto their devices. The term "smishing" is a combination of the words "SMS" (short message service) and "phishing."
How can you stop spam texts from reaching your phone?
Unfortunately, it can be very difficult to prevent spam text messages from reaching your phone. If the spam text message is from a legitimate business, often it will include directions to reply “STOP” in order to stop receiving messages. This will help reduce the number of unwanted (but not harmful) messages you get from businesses, charities, and politicians.
You can also block unknown numbers when you receive a text and delete the texts, but since scammers often use technology to text from many different numbers and rarely use the same number twice, this won’t necessarily stop future smishing attempts. Also, both Android and Apple offer features to filter text messages, as do many major mobile providers.
What is a phishing text message and how can it be harmful?
Phishing is when a reputable-seeming company sends an e-mail in an attempt to gain access to your personal information. The term "smishing" is a combination of the words "SMS" (short message service) and "phishing."
What should you do if you receive a spam text message?
If you receive a smishing or spam text message, you should copy and forward it to 7726 (SPAM). This helps your service provider keep records of and block fraudulent messages. Then report the message to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov. After that, block the number and delete the text message from your phone.
Remember to never click links from unknown numbers or provide personal or account information via text message. When in doubt, look for the company’s number online and speak to a customer service representative about the status of your account or order.
How can you protect your device from malware and viruses?
Never click links from unknown numbers and never provide personal information through text messages. Suspicious text messages will often look like prize notifications or give a warning about the status of your accounts, so be wary of these types of text messages.
Can spam text messages be dangerous?
Yes. Spam text messages can often contain links to websites that will install malware on your mobile device.
How do scammers obtain phone numbers to send spam texts?
Just like telemarketers or robocalling companies, individuals and organizations either buy lists of mobile phone numbers from third party sellers or use technology to randomly generate lists of numbers and mass text them, hoping to stumble on a few correct guesses. However, sometimes even legitimate businesses send spam texts you didn’t ask for, since many have access to your phone number as part of your account information.
Can you take legal action against those who send spam texts?
In 2015, the FCC ruled that spam text messages fall under the purview of the Telephone Consumer Protection Act, which means that you are entitled to compensation if you can track down and file suit against a company sending fraudulent or unwanted texts.
Can your service provider help you stop spam texts?
Yes. Copy and forward suspicious text messages to 7726 (SPAM). This helps your service provider keep records of and block fraudulent messages.
Can you report spam texts to the authorities?
Yes. Report suspicious text messages to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov.
How can you prevent getting spam texts in the first place?
While there’s no surefire way to stop spam text messages for good, you can reply “STOP” to any unwanted text that offers that option. You can also block any number that sends a suspicious text message. Both iPhone and Android also offer advanced options for filtering and blocking messages that might be spam. Additionally, many carriers offer free services to help reduce spam text messages.