Beginner message safety guide
Is This Text Message or Email a Scam? How to Tell If a Message Is Fake
September 2, 2026
If you are staring at a text message or email and wondering, “Is this real?” you are already doing the right thing. Scammers want you to react quickly. Your best protection is to pause, look at a few simple clues, and verify the message another way before you click, reply, or pay.
This guide is written for beginners, seniors, and families. You do not need special software or technical knowledge. You only need a calm checklist and permission to slow down.
Common scam text and email types
Scam messages often pretend to be ordinary notices from people or companies you already trust. Here are the patterns to recognize:
Fake delivery text scam
The message says a package is delayed, needs a small fee, or cannot be delivered until you confirm your address. It may look like it came from USPS, UPS, FedEx, Amazon, or another delivery service. The link usually leads to a fake form that asks for a card number or personal information.
Bank text scam
The message says your bank account is locked, a payment failed, or a suspicious charge needs approval. The goal is to make you click a fake bank login page or call a scammer pretending to be support.
Prize, refund, or gift scam
You are told you won a prize, qualified for a refund, or can claim a gift card. Then the message asks for shipping fees, taxes, a password, or your bank details. Real prizes do not ask you to pay first through a surprise text.
Family emergency scam
A message claims to be from a child, grandchild, friend, or lawyer. It says there was an accident, arrest, lost phone, or travel emergency. These messages often ask you to keep it secret and send money quickly.
“Your account is locked” email
The email looks like it came from a streaming service, email provider, payment app, or government office. It says you must verify your account now or lose access. The button may look official, but it can point to a fake website.
Telltale signs a message may be fake
You do not have to find every clue. One serious warning sign is enough reason to stop and verify.
- Urgency: It says “act now,” “last warning,” “account locked,” or “pay today.” Pressure is a scammer’s best tool.
- Money or gift cards: It asks for payment, gift-card codes, cryptocurrency, wire transfers, or a “small fee” before you receive something.
- Personal information: It asks for your password, Social Security number, bank login, one-time code, or photo ID.
- Odd sender address: The name may say “Amazon” or “Your Bank,” but the email address or phone number does not match the real company.
- Misspellings and strange wording: Some scams have perfect grammar now, but obvious mistakes, awkward greetings, or mixed-up company names are still useful clues.
- Links that do not match: The button says one thing, but the real link goes somewhere else.
If the message includes a photo, profile picture, or video clip to make the story feel more believable, check those too. Start with our guides on how to tell if a picture is fake and how to spot a fake video or deepfake.
Check the URL before you click
The URL is the web address behind a link. Scammers can copy logos, colors, and email designs, but they cannot use the exact same domain as the real company. This is why checking the URL is one of the most important habits.
On a phone or tablet
- Do not tap the link quickly.
- Press and hold the link with your finger.
- Look for a preview or menu that shows the web address.
- Cancel or tap away if the address looks odd.
- Open your browser or official app yourself and type the company name instead.
On a desktop or laptop
- Move your mouse over the link without clicking.
- Look at the bottom corner of the browser for the real URL.
- Read the main domain slowly before the first single slash.
- If you still are not sure, do not click. Type the official website yourself.
Watch for lookalike domains: amaz0n with a zero, paypaI with a capital “I” instead of an “l,” or extra words like secure-bank-login-example.com. A real company’s name should be in the main domain, not only in a long messy path after the slash. Also remember: a padlock or “https” does not prove the site is real. It only says the connection is encrypted.
What to do instead of clicking
- Open the company’s official app if you already use it.
- Type the company’s web address into your browser yourself.
- Call the phone number on the back of your card or a past bill.
- Ask a trusted family member, friend, librarian, or helper to look with you.
- Keep a screenshot if you may need to report the message later.
Do not reply “STOP” to a suspicious message unless you are sure it came from a real service you signed up for. Replying can confirm that your number is active. If your phone offers “report junk” or “block sender,” use that instead.
If you already clicked or replied
First, take a breath. Clicking once does not always mean disaster. The next step depends on what you shared.
- If you entered a password, change it from the real website and turn on two-step verification if available.
- If you entered card or bank details, call your bank using the trusted number on your card or statement.
- If you sent gift-card codes or money, contact the payment company quickly and keep screenshots.
- If you only opened the page, close it and avoid downloading files or entering information.
A simple rule to remember
If a message pressures you to click, pay, or keep a secret, pause and verify another way.
You are not being rude by checking. Real banks, delivery companies, relatives, and support teams can wait a few minutes while you make sure the message is safe.
FAQ
How do I know if a text message is a scam?
Be cautious if the text creates panic, asks for money or gift cards, includes a strange link, says your account is locked, or claims to be a delivery, bank, prize, or family emergency. Contact the company or person another way before you tap anything.
How can I tell if an email is fake?
Check who sent it, hover over links before clicking, look for pressure or threats, and compare the sender address with the official website. A fake email may use a real logo but come from a misspelled or unrelated address.
Is a link safe if it starts with https?
Not always. HTTPS only means the connection is encrypted. Scammers can also use HTTPS on fake websites, so you still need to check the exact domain name before clicking or entering information.
What should I do with a fake delivery text scam?
Do not tap the link or pay a fee from the message. Open the delivery company website or app yourself, type the address manually, and check your tracking number there.
Should I call the phone number in a suspicious message?
No. Use a phone number you already trust, such as the number on the back of your card, a past bill, or the company’s official website. Do not use the phone number inside the suspicious message.
Spot a Fake Certified · $9.99
Learn the checks before a scammer rushes you
Spot a Fake Certified turns suspicious-message safety into short, friendly lessons you can practice at your own pace.
Start Spot a Fake Certified — $9.99Or start with the free scam-spotting checklist.