The four patterns behind almost every scam text
The wording changes constantly; the structure does not.
- Missed delivery: 'Your parcel could not be delivered, reschedule here.' The link collects card details as a redelivery 'fee'.
- Unpaid toll or fine: a small amount, a short deadline, and a payment page that looks like the real operator.
- Bank or telco alert: 'A new payee was added' or 'your account is suspended', pushing you to a login page that harvests credentials.
- 'Hi Mum, this is my new number': a warm opener, then a request to transfer money because the sender is 'locked out' of their banking.
Check the destination, not the message
Sender names in SMS can be set almost freely, so a message can appear inside an existing thread from a real company. Judge the link instead. Read the domain immediately before the first single slash — that is the site you would actually land on. Anything appended after a real brand name, hyphenated oddly, or hosted on a shortener deserves no benefit of the doubt.
Better still, do not open it. Go to the company's app or type its address yourself. Every real parcel, toll and banking notice can be found that way.
The 'Hi Mum' test
If a family member messages from an unfamiliar number, call the number you already have for them. If they cannot be reached, ask the new number something only the real person would know and that is not visible on social media. Never send money, gift-card codes or account details on the strength of a text alone.
Reporting an SMS
Australian mobile users can forward scam texts to 7226 (SPAM), free of charge, which feeds carrier-level blocking. Report the number publicly as well: SMS campaigns reuse the same senders for days, so an early report saves a lot of people.
Where to report it in Australia
Reporting a call twice — once officially, once publicly — is what stops the next person answering it.
- Scamwatch (run by the National Anti-Scam Centre) at scamwatch.gov.au collects scam reports and publishes national trends.
- The Australian Cyber Security Centre at cyber.gov.au handles cybercrime reports, including phishing links sent by SMS.
- Your bank's fraud line, immediately, if any account, card or code was discussed.
- The number's page on NumberCheck, so the next Australian who searches it sees your experience straight away.