Got a Weird Text? Check the Sender Before You Tap Anything
“Royal Mail: your parcel is held pending a £1.99 customs fee.” “Your account has been locked. Verify now.” “Mum, I’ve dropped my phone, this is my new number.”
Scam texts are short by design. There is no room for a story that falls apart, and no time for you to think. The defence is equally short: do not tap, do not reply, check the sender first.
Rule one: never use a number printed inside the message
This is the mistake that costs people the most. Fraud texts often helpfully include a “customer helpline” in the body. That number belongs to the same operation. Calling it puts you straight through to the person who wrote the text, now armed with the knowledge that you believed it.
The only number worth checking is the originating sender — the one your messaging app shows at the top of the thread.
What a sender check tells you
Copy the sender number and run it. A free SMS sender check returns whether the number is valid, which country and carrier it resolves to, and the line type.
What that gets you, concretely:
- An invalid or unroutable sender — case closed, delete it.
- A foreign mobile claiming to be your national postal service — a mismatch between the number and the story.
- A freshly disposable line asking for a payment — the classic shape of an SMS campaign.
- A perfectly ordinary local mobile — which proves nothing either way, and that is worth knowing too.
Notice what a check deliberately does not do: it does not open the link for you, and it does not tell you the message is safe. No lookup can do the second thing.
Alphanumeric senders and why they fool people
Many legitimate businesses send from a sender ID — a word like “HSBC” or “DHL” instead of a number. These are not verified in most countries, so they can be spoofed, and worse, a spoofed message often lands inside the real thread alongside genuine messages from that company.
A message appearing in an existing conversation is therefore not evidence of anything. When there is no number to check, skip straight to opening the company’s app yourself.
The patterns that keep working
| Pretext | The tell |
|---|---|
| Parcel held, small fee to release | A tiny amount — small enough not to argue about, large enough to capture a card. |
| Bank fraud alert, “confirm this payment” | Pushes you to reply or call their number instead of your app. |
| Tax refund waiting | Deadline, plus a link to a form asking for full card details. |
| “Hi Mum, new number” | Moves to WhatsApp fast, then asks for a transfer. Ring the old number. |
| One-time code you didn’t request | Someone is mid-login. Never forward it. Change that password. |
Closing the loop the right way
- Do not tap the link. Do not reply — even “STOP” confirms a live number.
- Copy the sender number and check it.
- Open the company’s official app or type their website address yourself. Log in there. If there is a real problem, it will be waiting for you inside the account.
- Report the message. In the UK forward to 7726; most countries have an equivalent short code.
- Block and delete.
If you already tapped
Tapping a link alone is usually survivable. Entering details is the moment that matters. If you entered card details, call your bank on their official number now and say “fraud”. If you entered a password, change it everywhere you reused it, starting with your email — that is the account that resets all the others.
Then check the sender number and block it, so the next message from the same operation goes nowhere.
Frequently asked
How do I check who sent a text message?
Copy the originating sender number shown at the top of the thread — never a number printed inside the message body, which often belongs to the same operation — and run it through a free lookup for validity, country, carrier, and line type.
What happens if I reply to a scam text?
Replying confirms your number is live and monitored, which raises its value on the lists it is being dialled from. That includes replying "STOP". Block and delete instead, and report the message to your national short code.
I clicked a link in a scam text — what now?
Tapping a link alone is usually survivable; entering details is the moment that matters. If you entered card details, call your bank on their official number now and say "fraud". If you entered a password, change it everywhere you reused it, starting with your email account.
