I get more spam texts in a day than real ones, and opening just one bad link could cost me—phishing scams, stolen data, and even malware. So when a sketchy text pops up, I know better than to tap blindly.
4
Check the Sender’s Information
The first thing I do when I get a text with a suspicious link is verify who sent it. If it’s from an unknown number, a sketchy SMS short code, or an international code that’s out of the blue, that’s a red flag. I can’t even count how many times I’ve received adventurous selfie requests from +91 numbers—probably because I once thought it was a great idea to link my personal number in my Instagram bio.
Once I spot a weird number, I use caller ID apps like Truecaller to see if it’s tied to scammers or an actual business.
I also check if the message makes sense in context. If it claims to be from a service I use, the number should match what’s listed on their website—legit companies don’t text from random numbers.
I also apply a bit of common sense: I shouldn’t be getting interview invites from companies I never applied to, or rating surveys from delivery services I haven’t used. If you didn’t initiate contact, it’s much more likely to be a scam.
3
Scan for Red Flags in the Text and URL
Before I even consider tapping the link in a text message from a weird number, I inspect the message and URL carefully. The first detail I check is whether they’ve used urgency or pressure tactics. When I see phrases like “Your account will be suspended in 24 hours” or “Click now or lose this offer,” I’m instantly suspicious.
If a company genuinely needs me to take urgent action, they’ll contact me through official channels—not a sketchy, standalone text.
Grammar and spelling mistakes in the text are another big giveaway, as legitimate companies rarely make them. Errors in the URL are an even bigger warning sign. The most common ones are spelling omissions, such as “paypl” instead of PayPal in a phony URL like “paypl-support.info”.
The URL might even look real unless you look even closer and find sneaky, deceptive swaps like “paypa1”. Thankfully, most messaging apps let you long-press a link to preview it without opening it—though you should be careful when interacting with a link that might be dangerous. Some even offer you a preview automatically.
If I’m on my laptop, I just hover over the link to check where it really leads—no clicking required.
2
Use Link Scanners to Check the Site’s Status
If I can’t preview the link—or just want extra reassurance—I copy and paste it into a link scanner to get a more accurate read on whether it’s safe.
My go-to is the Google Safe Browsing search tool because it’s easy to use (and I’m a bit biased toward Google products). Just paste the link into the Check site status box, hit Enter, and in seconds, you’ll know if it’s been flagged as unsafe.
Other solid options include VirusTotal and URLVoid, which check if cybersecurity sources have identified the link as malicious.
But bear in mind that a “no unsafe content found” result doesn’t mean the link is harmless; it might just mean that the site hasn’t been checked yet. So when in doubt, play it safe.
1
Report the Scam Before Deleting the Message
If a message is a confirmed scam, don’t just ignore it. Reporting it helps prevent others from falling for the trap.
Most phones and messaging apps have a Block and report spam option. Blocking stops the sender from messaging you again, while reporting ensures your phone carrier flags the scam number.
Beyond your carrier, it’s worth reporting the scam to the company being impersonated. Most banks, delivery services, and major brands have dedicated scam-reporting pages. They’ll ask you to forward a copy of the message or a screenshot so they can better fight back against fakes.
If you’re as zealous as I am, you can also report the scam to local authorities or cybersecurity agencies. Many countries have official websites for phishing scam reports.
Once you’ve done your part, delete the message and move on. Never reply, as engaging with scammers only makes you a bigger target, even if you think you could never fall victim to cybercrime. Remember, if something feels off, trust your instincts. Ignoring the message is always a safe bet when you’re not sure.
