SMS Scam — I got a strange text, is it a trap?
Package on hold, bank alert, tax warning, suspicious refund offer… Smishing (SMS-based fraud) is now one of the most reported scam channels by national consumer agencies (FTC in the US, Action Fraud in the UK, BSI in Germany). Check the sender number before you tap any link — it takes 30 seconds.
The 5 most common smishing texts
Fake delivery text (package on hold)
“USPS, UPS, FedEx, DHL, Royal Mail — "your package is held, pay $1.99 fee"”
The #1 SMS scam globally. The link points to a near-perfect clone of the carrier site. Card details captured are used within minutes for fraudulent purchases. No carrier ever requests a payment via SMS link.
Fake government / tax-office text
“"IRS notice — final warning", "HMRC tax refund pending", "DGFiP unpaid amount"”
No tax authority sends payment notices or refund requests via SMS link. Real notices arrive by mail or through your authenticated online account. If in doubt, log in directly to the official website without clicking the link.
Fake bank text
“"Suspicious activity detected", "verify your transaction here", spoofed bank name”
The sender ID can display your bank's actual name (SMS spoofing). No bank ever asks for credentials, OTPs, or transaction validation through an SMS link. Always call the number on the back of your card if you have any doubt.
Prize / refund / lottery text
“"You won $5,000", "refund pending — claim here", "VAT refund authorized"”
If you didn't enter a contest, you didn't win one. "Refunds" requiring a small processing fee are always scams. The fee mechanism is designed to harvest card details, not to collect a real charge.
Job / crypto / investment text
“"Easy work-from-home, $300/day", crypto trading group, fake recruiter”
Unsolicited job offers via SMS leading to WhatsApp/Telegram groups are part of pig-butchering scams. The end goal is always to push you to deposit money into a fraudulent crypto platform.
7 red flags that expose a fraudulent text
Instant risk score
Our engine combines carrier, line type, community reports and known fraud patterns to give the sender number a 0-100 risk score.
Smishing detection
Suspicious VoIP, foreign short codes, mass-reported numbers — Clairmo automatically identifies the typical smishing fingerprints.
100% private lookup
We never resell numbers you enter and your search leaves no public trace. Anonymous lookup, by design.
SMS scam — Frequently asked questions
A text is most likely a scam if it includes: a shortened link (bit.ly, t.co, an unfamiliar domain), artificial urgency ("package on hold", "account suspended", "unpaid fine"), a request for personal or banking info, or an unknown sender pretending to be a delivery service, the IRS, your bank, or a government agency. No legitimate institution asks you to settle anything via an SMS link.
Enter the sender number into Clairmo: in 30 seconds you get the carrier, line type (mobile, VoIP, premium-rate), country/region and community reports. Smishing texts often come from VoIP numbers, foreign numbers, or unknown short codes — all signals Clairmo flags automatically.
1. Do not enter any data on the landing page. 2. If you submitted card or bank details, contact your bank IMMEDIATELY to freeze the card. 3. Change the password of any account you tried to log into. 4. Report the SMS (in the US: forward to 7726 / SPAM; in the UK: forward to 7726; in France: 33700). 5. File a complaint with your local cybercrime authority if you suffered financial loss.
Top patterns worldwide: (1) Fake delivery texts (UPS, FedEx, USPS, DHL, Royal Mail, La Poste — "package held, pay $1.99 fee"), (2) Fake bank alerts ("suspicious activity, confirm here"), (3) Fake IRS / HMRC / tax-office warnings with arrest threats, (4) Fake prize / lottery / refund offers requiring upfront fees, (5) Job-offer scams asking to install crypto wallets or transfer funds. All redirect to a clone page that captures credentials or card data.
Yes. Replying — even STOP — confirms to the scammer that your number is active, which multiplies further attempts and often leads to your number being sold to other fraud rings. STOP only works for legitimate marketing senders. For a suspicious text, never reply: report it to your carrier (7726 in the US/UK, 33700 in France) and delete it.
United States: forward the text to 7726 (SPAM). United Kingdom: forward to 7726 — your carrier reports it to Ofcom. France: forward to 33700 (free national reporting service). EU: report on cybermalveillance.gouv.fr or your country's equivalent. You can also report on Clairmo to alert the community — the more reports a number gets, the higher its risk score.
Three main reasons: (1) a recent data breach exposed your phone number (check HaveIBeenPwned), (2) you entered your number in a contest or form that resold it, (3) scammers run scripted blasts across entire number ranges with no specific target. In any case, never click the link, never reply, and report systematically.
Where this information comes from
Smishing is among the most reported consumer fraud channels worldwide. The patterns and statistics referenced above draw on the public communications of the relevant authorities:
- FTC ReportFraud (US) — official Federal Trade Commission portal collecting consumer-reported scams.
- Action Fraud (UK) — UK national reporting centre for fraud and cybercrime.
- BSI (Germany) — German Federal Office for Information Security, smishing advisory and consumer guidance.
- FCC — Caller ID Spoofing — Federal Communications Commission resource on number spoofing techniques.
You've got a suspicious text in front of you?
Don't tap any link. Type the sender number (visible at the top of the SMS) into the search bar. In 30 seconds you get carrier, region, line type, risk score and community reports.
Identify the number now