Guides Cyber safety for everyone

How to Spot Scam SMS and Text Messages

By Ravindra Bagale, Cyber Security trainer LinkedIn Published: 28 October 2026 Last updated: 28 October 2026

Scam SMS messages often warn about a parcel fee, KYC update, blocked account or prize — then push a short link. Do not tap. Open the real courier, bank or government app yourself, or type the official website from memory or a bookmark.

Quick steps

Unexpected text + pay/login link = treat as hostile until verified.
Do not tap short links in surprise SMS.
Open the official app or type the real site yourself.
Never reply with OTP, PIN or ID photos to a text you did not expect.
Report junk in your phone’s SMS app and, if money moved, use official fraud lines.

Why this matters

James in London got a “DHL £1.90 fee” text with a link. Meena in Nashik got a “KYC expire today” SMS that looked almost like her bank. Both links led to fake login pages.

SMS is easy to fake. Your habit is simple: never log in from a surprise link.

What you need to know

What to watch for: urgency (“today only”), money requests, shortened URLs, odd sender names, spelling that feels off. What safe looks like: you open the official app from the store icon you already trust, or you type the known address.

SMS habits

Tap link in surprise parcel SMS — Unsafe
Open courier app you already installed — Safer
Reply STOP to every scam (sometimes) — Often useless — just delete/report

How to do it (step by step)

Read the SMS without tapping.
Ask: did I order something or start a bank task today? If no, delete/report.
If yes, open the official app or website yourself — do not use the SMS link.
Check the real tracking or account screen there.
Never type passwords or OTPs into pages that arrived only via SMS link.
Show one example to family so they learn the same pause.

Example: Sofia skips a fake DHL link

Sofia in Dublin received: “Your parcel is held. Pay €2.99: http://dhl-fees-secure.example” (fake pattern).

She did not tap. She opened the real DHL site from a search she typed carefully and found no fee due.

Second example: Meena opened her bank’s official Android/iOS app (not the SMS link) and saw no KYC deadline. She deleted the text and told her parents’ group.

Common mistakes

Trusting the sender name alone — names can be spoofed.
Paying a tiny fee “just in case” the parcel is real.
Forwarding the link to friends “to check” — they might tap it.

Trusted places to check

Quick revision

No taps on surprise pay/login links.
Use official apps you open yourself.
Never reply with OTP or ID photos to cold SMS.

Ravindra Bagale's Tip

Unexpected text + payment link = hostile until you verify in the official app.

Quick quiz: check what you learned

A surprise SMS asks you to pay a tiny parcel fee via link. You should…
1. Ignore the link and check the courier in the official app
2. Tap quickly so the parcel is not returned today
3. Reply with your OTP to prove you own the phone
4. Forward the link to a friend and ask them to test it
Show answer
A. Tiny fees via surprise links are a common trap.
Safest way to check a “bank KYC” SMS warning?
1. Open your bank app from the home screen icon yourself
2. Use the link inside the SMS because it looks branded
3. Call the phone number printed inside that same SMS
4. Send a photo of your Aadhaar to the SMS sender now
Show answer
A. Only trust channels you start yourself.

Learn more on this site

Short path above. These pages go deeper:

Frequently asked questions

What is this guide about?

It explains everyday safety for: scam SMS, parcel fees, KYC links, short links. Plain steps, no IT jargon required.

What is the one rule to remember?

Do not tap. Open the official app or type the real website yourself.

Do I need to be a cyber expert?

No. These steps are for parents, students, shoppers and anyone who uses a phone.

Where do I report if something already went wrong?

India: 1930 and cybercrime.gov.in. US: reportfraud.ftc.gov. UK: Action Fraud. Also tell your bank or the platform quickly.