My Mom Almost Sent Her Social Security Number to "USPS"
About a year ago, my mom forwarded me a screenshot one morning, kind of flustered. "I got a text from the post office," she said when I called her back. "They say they can't deliver my package, and I need to update my address."
She read me the text. It sounded official enough — something about a failed delivery attempt, a tracking number, and a link to "confirm your information." The problem? She wasn't expecting a package. And the link wasn't usps.com. It was something like usps-redelivery-update.com. A fake.
She hadn't clicked it yet (thank God), but she was about to. And I'll be honest — the text was well-written. No weird typos, no broken English. If I'd been distracted and glanced at it quickly, I might have tapped that link too.
That's when I realized: the old advice about "look for bad grammar" isn't really enough anymore. Scam texts have gotten better — a lot better. And the people I love most are getting 40 or 50 of these things a month.
So I want to walk through this. Not to scare anyone, but because a scam text message is one of those things that's actually pretty easy to spot once you know the patterns. And knowing the patterns means you don't have to second-guess every text that comes in.
Why Scam Texts Are Everywhere Right Now
Here's what's going on. According to the FTC, Americans lost $470 million to text message scams in 2024 alone — up from $373 million the year before. Adults over 60 accounted for $2.4 billion in total fraud losses that same year. And the average person now gets around 41 spam texts a month. That's more than one a day.
The reason it's getting worse has a lot to do with AI. Scammers are using AI tools to write their messages now — and some are even using AI voice cloning to impersonate family members over the phone, which means the texts sound more natural, more convincing. A 2025 study on AI-generated phishing found that these messages get clicked at roughly four times the rate of the old human-written ones. So the "look for spelling mistakes" trick that used to work? It still catches some, but it's not the safety net it used to be.
The technical term for text scams is "smishing" — like phishing, but through SMS. But you don't need to remember the term. You just need to know what these messages look like.
The 7 Most Common Scam Texts (With Real Examples)
I've been collecting these from my own phone, my parents' phones, and from readers who send them to me. Here are the types you'll see the most:
1. Fake package delivery notices. This was the number one reported scam text in 2024. It looks like it's from USPS, UPS, or FedEx. Something like: "Your package could not be delivered. Click here to reschedule: [link]." The link goes to a fake site that asks for your address, and then your credit card to pay a small "redelivery fee."
2. Fake bank fraud alerts. These are scary because they feel urgent. You'll get something like: "Chase Bank Alert: Suspicious charge of $349.99 at Best Buy. If this wasn't you, reply YES or call 1-800-XXX-XXXX." That phone number goes straight to the scammer.
3. Unpaid toll scams. These have been blowing up. A text saying you owe $4.15 or $7.80 for an unpaid toll, with a link to pay. The amounts are small on purpose — small enough that people just pay without thinking.
4. Wrong number / friendship scams. This one is sneaky. You get a text like: "Hi Mark, are we still on for lunch Saturday?" You reply, "Sorry, wrong number." They apologize, get friendly, and over weeks build a relationship. Eventually they steer you toward a "great investment opportunity" — usually crypto. Law enforcement calls this "pig butchering" (they're fattening you up before the scam). It sounds ridiculous, but people lose thousands this way.
5. Fake job offers. "Work from home, $300/day, no experience needed." Always a scam.
6. Medicare or Social Security impersonation. "Your Medicare benefits require verification. Call immediately to avoid suspension." Medicare will never text you like this. Neither will Social Security.
7. IRS scams. I want to be clear about this: the IRS does not text people. Period. If you get a text claiming to be from the IRS, it is a scam text message. Every time. No exceptions.
How to Spot a Scam Text in About 10 Seconds
You don't need to be a tech expert. You're really just looking for a few things, and once you've seen them a couple of times, they start jumping out at you.
Check the phone number. Real companies usually text from short codes (5 or 6 digit numbers) or their verified business name. If it's coming from a regular 10-digit phone number — or worse, a number with a weird country code — that's a red flag.
Look at the link. This is the big one. Long-press the link (don't tap it). Does it actually go to the company's real website? A real USPS link would be something like usps.com/tracking. A scam link might be usps-delivery-update.com or us-postal-redelivery.info. If the domain name doesn't match the company, don't touch it.
Notice the pressure. Scam texts almost always want you to act right now. "Respond within 24 hours." "Your account will be suspended." "Immediate action required." Real companies don't threaten you over text.
Watch for personal information requests. No real company will ask for your Social Security number, bank account, or password through a text message. If a text asks for that, it's a scam. Full stop.
Be careful with "Dear Customer." If your bank is actually texting you, they know your name. Generic greetings are a sign that this message went out to thousands of people.
And here's something most people don't know: don't reply STOP to a scam text message. I know, that feels counterintuitive — we've been trained to text STOP to unsubscribe. But when you reply to a scammer, all you're doing is confirming that your phone number is active and that someone reads the messages. You'll get more, not fewer.
What to Do If You Already Clicked a Link
Okay, so maybe you're reading this and thinking, "I already clicked one of those links last week." Don't panic. What matters is what happened after you clicked.
If you clicked the link but didn't enter any information — close the browser, and you're most likely fine. Just clicking a link usually doesn't do damage on its own (on a phone, anyway). Delete the text and move on.
If you entered a password — change that password right away. And if you use the same password on other sites (I know, I know — a lot of us do), change it on those sites too. While you're at it, turning on two-step verification adds a real layer of protection. This is the most important thing you can do, and it takes about 10 minutes.
If you entered financial information (credit card, bank account) — call your bank immediately using the number on the back of your card. Not a number from the text. The number on your actual card. They can freeze things, watch for charges, and issue you a new card. Banks deal with this all day long; they won't judge you.
If you entered your Social Security number — this is the most serious one, but it's still fixable. You'll want to place a fraud alert with all three credit bureaus. Here are the numbers:
- Experian: 1-888-397-3742
- Equifax: 1-800-525-6285
- TransUnion: 1-800-680-7289
You only need to call one — they're required to notify the other two. You can also put a credit freeze on your accounts, which is free and prevents anyone from opening new credit in your name. It sounds dramatic, but honestly, a credit freeze is something I recommend for everyone over 60 regardless. It takes about 15 minutes total and gives you real peace of mind.
How to Block and Filter Scam Texts on Your Phone
This takes about 5 minutes, and it won't catch everything, but it will cut down on the junk significantly.
On iPhone:
- Open Settings
- Scroll down to Messages (it's the green icon)
- Look for Filter Unknown Senders and turn it on
This moves texts from people not in your contacts into a separate tab. You'll still get them, but they won't ping you with notifications, and they'll be tucked away where they're less likely to trick you.
On Android:
- Open the Messages app
- Tap the three dots in the upper right → Settings
- Look for Spam Protection and make sure it's turned on
(The exact steps vary a little depending on your phone brand, but it's always in Messages → Settings somewhere. Don't worry if your screen looks slightly different.)
Use your carrier's free spam filter. Most people don't know these exist, but all three major carriers offer free apps:
- AT&T: ActiveArmor
- Verizon: Call Filter
- T-Mobile: Scam Shield
These are free to download from the App Store or Google Play. They block a lot of the obvious junk before it even reaches you.
Report scam texts. You can forward any suspicious text to 7726 (which spells SPAM on your keypad). Your carrier uses these reports to update their filters. You can also report scam texts at reportfraud.ftc.gov. It takes about two minutes and it actually helps — the FTC uses these reports to build cases against scam operations.
A Quick Word About Protecting Your Family
Here's what I tell my parents: if you get a text that makes you feel rushed, nervous, or confused — that feeling itself is the warning sign. Real companies don't make you feel that way. Scammers do, because pressure is their whole strategy.
I also tell them: you can always call me before you click anything. That's not a burden. That's what I'm here for. And I'd say the same thing to you — if you have someone in your life who's good with technology, tell them you might call once in a while to check on a weird text. Most people are happy to help, and it takes 30 seconds to say "yeah, delete that one."
If you want to read more about staying safe with technology, I wrote a piece on AI tools that are actually practical for everyday use — including ones that can help with security. We've also put together a list of the best free apps for seniors that includes password managers and other safety tools. That covers everything from video calls to password managers.
You're Already Ahead
If you've read this far, you now know more about scam text messages than most people. You know what the common ones look like. You know how to check a link without clicking it. You know what to do if you already fell for one. And you know how to turn on the filters that cut down on the noise.
That's not nothing — that's a lot, actually.
My mom still gets scam texts. Everybody does. But she doesn't panic about them anymore. She looks at the number, glances at the link, and if it seems off, she deletes it. Sometimes she screenshots it and sends it to me with a little triumphant message: "Caught another one."
That's what I want for everyone reading this. Not fear, not anxiety — just the quiet confidence of knowing what to look for.
If someone you love is still answering every text that comes through, not sure what's real and what isn't — send them this. Walk them through the filters. Sit next to them while they set it up. This I promise: the five minutes you spend on that is worth more than any security app you could buy. Because the best defense against a scam text message isn't software. It's a person who knows what to look for.
And now that person is you.
