How to check a suspicious text message
A simple way to pause, check and avoid using links in a suspicious text message.
Before you continue
Do not enter passwords, payment details or one-time codes after following a suspicious text link.
If you sent money, shared banking details or gave access to a financial account, contact your bank or card provider immediately using trusted details. For exposed passwords, codes, identity details or other account access, contact the affected provider.
Do not tap the link first
A suspicious text often tries to make you act quickly. It may mention a parcel, toll, bank, tax refund, account problem or family emergency.
Pause before tapping, replying or calling a number in the message.
Read what it asks you to do
Be careful if the message asks for payment, a password, a one-time code, remote access or personal information.
Treat the sender label as a clue
An unexpected request still needs an independent check, even if the sender name or number looks familiar. A branded SMS or MMS marked “Unverified” may be a scam or a real business that has not registered its sender ID. These sender-ID rules do not cover messages sent from phone numbers or apps such as WhatsApp and iMessage.
Check through the official app or website
Open the organisation's official app or type the website address yourself. Do not use the link from the message.
If the message claims to be from a person you know, contact them another way.
If you already responded
Contact your bank or card provider immediately if you sent money, shared banking details or gave access to a financial account. Use contact details you find independently. For exposed passwords, codes, identity details or other account access, contact the affected provider through its official app or website.
Do not delay these steps to collect evidence. When it is safe, keep the message or a screenshot for your report. Do not open its links or attachments to gather more information.
Block and report when appropriate
Your phone may let you report junk or block the sender. Scamwatch also accepts scam reports.
Reporting can help, but the most important step is avoiding the link and protecting any affected account.
You'll know how to check a suspicious text without using the message's own links.
What to expect
You have checked the message through a trusted channel or decided not to act on it.
Sources and further reading
- Text or SMS scams · Scamwatch
Supports SMS scam warning signs and safer checking behaviour.
- Getting text messages from businesses and organisations · ACMA
Explains Unverified sender labels and the limits of the branded SMS/MMS sender ID register.
- What to do if you've been scammed · Scamwatch
Supports contacting the bank or card provider immediately and protecting accounts before reporting.