Text, call and email scams
Real examples of the texts, calls, and emails going around right now, each with a clear verdict, the red flags to spot, and exactly what to do. Free.
Package texts
Scam. The tiny delivery fee text is built to collect card data, not move a package. The structural tell is the payment path: an unrequested SMS jumps from “package held” to a checkout page, with no verified tracking session, no account login you started, and no order page you already know. The $2.97 fee is bait for the full card number, expiry, security code, billing address, and any bank approval code that follows.
Local robocalls
Yes. Local caller ID is forgeable. The structural tell is the match: neighbor spoofing copies your area code and often your first three digits after it, so the call looks like a nearby person or branch. The FCC describes spoofing as a caller who “deliberately falsifies the information transmitted to your caller ID display,” and carriers label some calls with Scam Likely or Spam Risk, but a clean local number is not evidence.
Toll texts
Fake. The payment path gives it away. A real unpaid toll is handled inside the toll agency account, app, invoice, or violation process you already use. This text controls the whole route, from threat to payment page, so you never get to verify the charge before handing over card data.
Microsoft alert
Fake. This is Microsoft credential theft. The structural tell is the forced Microsoft sign-in outside your account security area. Microsoft account activity is checked after you open your account yourself; the scam gives you a button, PDF, or QR code because it needs your password, MFA approval, or session cookie on its path. Some current attacks abuse real Microsoft notification plumbing, so the sender alone does not settle it.
Reply Y scam
It is a scam. The structural tell is the disabled link plus the demand that you reply before the link works. On iMessage, links from unknown senders can sit disabled until you answer, and the scam turns that safety behavior into an instruction. The sender wants you to switch the link on yourself, then land on a fake payment or login page.
Trapped fund email
Yes, it is advance-fee fraud. The structural tell is the role swap: a stranger makes you an heir, investor, diplomat, or next of kin, then makes you pay before any verified claim exists. An actual estate or court file can be checked through known public channels. This script gives you secrecy, a 50/50 split, and a made-up release fee instead.
Walmart PS5 call
It's a scam. Hang up. The structural tell is the forced cancel path: a real Walmart order leaves an order record you can check in your own Walmart account, but this call makes cancellation happen only through press 1. The live operator is the trap, not customer service.
Spoofed calls
It's a scam. Caller ID can be forged, and the FTC says scammers can fake the number that appears on your phone. The thing that settles it is the demand inside the call: credentials, one-time codes, payment, or remote access before you can check your own account.
SIM swap calls
Yes. Treat sudden no service as takeover. The giveaway is control of your phone number moving off your handset, so calls, texts, and reset codes land on the criminal's SIM or eSIM. The FBI's IC3 reported 1,075 SIM-swap complaints in 2023, with adjusted losses of more than $48.7 million.
DocuSign emails
Fake if DocuSign becomes mailbox login. DocuSign signing notices use an envelope flow, and legitimate notices include a security code you can use from docusign.com instead of trusting the button in the email. The structural tell is the handoff: a message that starts as a signature request, then asks for Microsoft 365, Gmail, a PDF download, or a QR scan, has left the DocuSign signing path.
T-Mobile points
It is fake. The structural tell is the reward system itself: a text invents expiring T-Mobile points, then sends you outside T-Life to claim a phone. T-Mobile's real customer perks sit in the T-Life app, not in a midnight points balance sent to random SMS threads.
Apple Pay callback alert
It is a scam. Hang up. Apple states on its support page: "Apple will never ask you to provide your password or verification codes." That one sentence settles it. Real Apple Pay fraud alerts show up inside the Wallet app or as a push notification you tap to open your own account. They never hand you a phone number. Apple already knows who you are because the alert is tied to your device.
Deepfake romance scams
Yes, this is a romance scam. The single fact that settles it: the person wants your money yet has never stood in the same room as you. No real partner does that. The career they describe, deployed soldier, offshore rig engineer, overseas doctor, was picked because it makes meeting impossible while sounding noble enough to shut down questions. Every week of affection before the money request is grooming. The emergency that finally drops, frozen funds, medical bills, customs fees, was scripted before they matched with you. These operations often run from organized fraud compounds where dozens of operators work parallel targets off the same playbook.
Online romance scam
If they dodge every video call, yes. That refusal is the tell that settles it before anything else. Broken camera one week, military deployment the next, hospital the week after. One excuse is normal. A rotating set over weeks means the face in the photos is someone else's. The FTC recorded $1.3 billion in romance-scam losses in 2022.
Accidental payment refund
Yes, this is a scam. All three apps let senders reverse genuine mistakes through support. A real accidental sender would use that process, not message you begging for a refund. They skip it because the money came from a stolen bank account or credit card. Requesting a reversal would expose the fraud. They need you to send new, clean money from your own account instead.
Apple Pay $8,250 charge
Scam. Every Apple Pay transaction requires your Face ID, Touch ID, or passcode at the exact moment of purchase. Nothing sits in a queue and 'auto-approves' after 35 minutes. That process does not exist in Apple Pay, in any card network, or anywhere in payments. The text exists to get you on the phone with a scammer before you open your Wallet app and see zero pending charges.
Apple Pay fraud alert
Scam. Apple Card and Apple Pay fraud alerts are push notifications inside the Wallet app. They do not arrive by SMS. Your Apple ID password, two-factor code, full card number, and Social Security number are never requested by Apple over text, email, or phone. The message you got is a credential harvest: someone wants your Apple ID login and the six-digit verification code that unlocks it.
IRS criminal case call
It is a scam. Hang up. The IRS initiates all contact by postal mail, not by phone. That one fact kills every version of this call. The agency publishes it plainly on irs.gov: "The IRS will never call to demand immediate payment using a specific payment method such as a prepaid debit card, gift card, or wire transfer." No real IRS process starts with a stranger on the phone telling you to buy gift cards.
Apple Pay suspicious charge
Scam. Delete it now. Apple Pay purchase alerts are push notifications from the Wallet app, not text messages. Apple's support site says it outright: they will never ask for your password or verification code by text or phone call. A real disputed charge is handled inside Wallet by tapping the transaction and choosing Report an Issue, or through your card issuer. No part of that process involves a phone number in a text.
Romance crypto scam
Yes. This is pig butchering. The FBI uses that name because the scammer fattens your confidence with fake returns before taking everything. The structural tell: no crypto exchange on earth blocks a withdrawal behind an additional deposit. Coinbase does not. Kraken does not. Binance does not. The moment someone says pay a 'tax' or 'insurance fee' to unlock your own money, you are looking at a website built to display invented numbers. The FBI's IC3 ranks investment fraud, driven heavily by pig butchering, as the costliest category of cybercrime reported to it.
Apple Pay charge text
Scam. Not from Apple. Apple Pay has no SMS alert system, not a limited one, none at all. Transaction alerts are push notifications inside the Wallet app, tied to your device through Apple's encrypted push service. The callback number connects to a scammer who triggers a real Apple ID password reset on their end, then asks you to read back "the verification code Apple just sent." That code is the reset confirmation. You read it out, they own your account.
Dating app romance scam
Yes, this is a romance scam. The gift card ask settles it. No real person asks someone they have never video-called to buy Google Play codes and photograph the backs. Gift cards, crypto, wire transfers: they show up because the money cannot be reversed. The person on the other end is not a deployed soldier or an offshore engineer. They are running a script, often from a fraud compound overseas, and you are one of dozens of targets they are messaging today.
Military romance DM
Fake. The tell is the fee. No branch of the U.S. military charges soldiers for leave, medical care, or communications. Army CID says it directly: 'Soldiers are not charged money so that they can go on leave.' DFAS deposits their pay on the 1st and 15th, deployed or not. TRICARE covers medical. MWR centers provide free video calls. Every service this person claims to need your money for, the military already funds.
Apple Pay blocked charge
Scam. Delete it. Apple does not text you about blocked charges, period. Their support page states: "Apple will never ask you to provide your password, device passcode, or two-factor authentication code or to enter it into any website." This text routes you to a live scammer who asks for your Apple ID login while typing it into your account on a second screen.
Trying to identify the number instead?
A five or six digit sender is a short code. Some belong to your bank, some to nobody.
Look up a short codeCheck something yourself, free
Got a message, link, or number you are unsure about? Paste it and get a straight answer.