Check your phone right now. There is a decent chance you have an unread text about a toll you did not know you owed, a package that cannot be delivered, or a stranger asking if this is still Amanda’s number. You did not sign up for any of it, you cannot make it stop, and it always arrives at dinner.
The volume is not your imagination. According to the Federal Trade Commission, people reported $470 million in losses to text scams in 2024, more than five times the amount reported in 2020. What follows is a field guide to the categories that keep coming back. We are deliberately not listing specific messages, because the wording changes constantly while the underlying tricks do not. Learn the categories and you will recognize next year’s versions on sight.
The Recurring Greatest Hits
The FTC found that five categories accounted for roughly half of all text frauds reported to it in 2024. Ranked by how often people reported them: fake package delivery problems, phony job opportunities, fake fraud alerts, bogus unpaid toll notices, and wrong number messages. Here is what each looks like in the wild.
- The unpaid toll. A short message says you owe a small amount for a recent toll and threatens a late fee. The amount is always small enough that paying feels easier than arguing. The link goes to a convincing payment page built to collect your card number.
- The delivery that needs a small fee. A package is held up over a tiny shipping charge or an address confirmation. This one works because at any given moment most of us actually are waiting on something.
- The bank fraud alert. A message asks you to confirm whether you authorized a charge. Reply no, and someone calls within seconds, calm and professional, and walks you through moving your money somewhere safe. That call is the scam. The text was just the doorbell.
- The wrong number that becomes a conversation. It starts as an honest mistake. You reply to be polite. The person is warm and pleasant, becomes a friend over days or weeks, then mentions an investment opportunity. It plays a long game and it works on smart, sociable people.
- The job with great pay and strange onboarding. Flexible remote work, generous rate, no interview. The FTC noted that reports of a new kind of task scam took off in 2024, and the pattern involves simple repetitive tasks that appear to earn money until you are asked to deposit your own funds to unlock bigger earnings.
- The family member with a new number. Hi mom, my phone broke, this is my new number. A day later there is an urgent problem and a request for money. It targets exactly the instinct you should have as a parent.
The Pattern That Unites Every One of Them
Strip the details away and every message on that list does the same three things. It arrives without warning. It creates a reason to act quickly: a fee, a threat, an opportunity, a person you care about. And it hands you a link, a number, or a conversation, all of which lead somewhere the sender controls.
That is the whole trick. Everything else is decoration, and the decoration is what changes. The agency, the bank, the delivery company will all be different next year. The unexpected arrival, the pressure to move fast, and the helpful link will not.
The FTC’s guidance on spam texts states the underlying rule cleanly: legitimate companies will not ask for information about your account by text. Real organizations do not open a relationship with you over SMS and then ask you to authenticate yourself into a link they provided.
Why Replying at All Is a Bad Idea
The instinct to answer is strong. Sometimes you want to correct the wrong number. Sometimes you want to type STOP. Sometimes you just want to be rude to a scammer. All three are mistakes.
The FTC is blunt in its consumer guidance: do not reply to unexpected text messages, because it could lead to a scam. Any reply confirms a real person reads this number, which makes it more valuable and gets it shared more widely. Worse, the reply is often the actual goal. The FTC describes how responding gives scammers room to spin elaborate lies and drain a bank account, and how the follow-up conversation is where card numbers and Social Security numbers get handed over.
Do not click, either. The FTC’s advice for an unexpected message asking for personal information is to avoid the links and instead contact the company using a phone number or website you know is real, not the details in the message. It is the same principle that makes email phishing so hard to stop, and we go deeper on why capable people still get caught in our piece on the surge in phishing attacks.
How to Report Them
Reporting takes ten seconds and it genuinely helps, because carriers and investigators use the volume to find and block the sources.
- Forward it to 7726. That spells SPAM on a keypad. The FTC notes this reports the message to your wireless provider, which helps them block similar messages.
- Use the report option in your messaging app. Both major phone platforms include a way to report junk or unwanted messages directly from the conversation.
- Report it to the FTC. Submit it at ReportFraud.ftc.gov. That feeds the data telling everyone which scams are surging.
- Then delete it. Do not keep it around to show someone later. The screenshot is enough.
Filtering is worth turning on too. The FTC points to spam filters built into both major phone platforms, tools offered by wireless providers, and third-party blocking apps. None catch everything, but they meaningfully reduce the noise.
The One Habit That Beats All of Them
If you remember nothing else from this page, remember this: never use the contact path a message gave you. Not the link, not the phone number in the text, not the app it wants you to download.
Verify independently instead. Open your bank’s app the way you always do. Type the delivery company’s address yourself. Call your kid on the number already in your contacts. If the toll is real, you will find it on the tolling authority’s own site. If the fraud alert is real, it will be waiting inside your account when you log in normally. This works on every scam above, including the ones nobody has invented yet, because it removes the one thing every scammer needs: control of where you go next.
Two supporting habits make it stronger. Agree on a family code word for emergencies, so a panicked message from an unfamiliar number can be checked in one question. And protect your important accounts with strong sign-in, because a stolen password is much less useful to a stranger when a second factor stands in the way. Our comparison of security keys, passkeys, and multi-factor authentication explains the options without the jargon.
The Bottom Line
The messages will keep coming and they will keep getting better written. That is fine. You do not need to identify every variation, and you should not feel foolish for briefly believing one, because they are built by people who do this professionally. You need one rule, applied consistently: an unexpected message never gets to decide where you go next. Do not reply, do not click, verify through a path you chose yourself, then forward it to 7726 and delete it. That costs nothing and it holds up no matter what next year’s greatest hits look like.
We help people around Denton County sort out what happened when one of these got through, and we help families set things up so the next one does less damage. If you clicked something and you are not sure what it did, or you just want someone to look over how your accounts are protected, we are glad to help. Contact us today.
Sources:
Comments are closed