Verified sender Published Aug 20, 2026

Who is texting me from 31354?

Bewary fraud research, published by Andrey Khayrullaev, founder. How we research scam patterns.

Example text from 31354

Fabletics: VIP Sale is live. Get 2 for $24 leggings, up to 70% off sets, bras, and cold-weather layers. Shop your size before midnight: https://www.fabletics.com

REAL

Legitimate Fabletics code, not a scam. The structural tell is a retail short code tied to Fabletics VIP shopping, activewear offers, order context, and account membership language. A fake changes the job of the text. It turns a leggings sale into a payment rescue, a locked-account threat, a fake $89.95 credit, or a checkout page that is not on fabletics.com.

Operated byFabletics (TechStyle Fashion Group)

What real messages from 31354 do

Send VIP sale promotions for Fabletics activewear. Expect copy about leggings, sports bras, matching sets, new drops, member pricing, sitewide discounts, and deadline language tied to shopping, not emergency security work.
Point shoppers back to Fabletics pages. The clean pattern is simple: Fabletics name in the text, a shopping offer that matches the brand, and a destination on fabletics.com where you can browse sizes, colors, carts, credits, and account settings.
Send membership reminders tied to the Fabletics VIP model. Real traffic can mention member credits, VIP pricing, your monthly shopping window, or account activity because Fabletics sells through a membership program, not just one-off checkout.
Send order-related notices after you shop. A real 31354 message can fit a recent Fabletics order, such as a purchase confirmation, shipment movement, cart reminder, or return-related prompt that uses normal retail wording and does not invent a separate billing crisis.
Use sale urgency in a retail way. “Ends tonight,” “last day,” and “VIP Sale” fit clothing marketing when the message is about inventory, sizes, styles, and member prices. The urgency should push a shopping decision, not force identity checks inside the text thread.
Send image-heavy or offer-heavy retail messages. Fabletics sells apparel, so texts can be visual, coupon-like, and seasonal: Black Friday sets, new arrivals, winter layers, warehouse sale language, or a member-only drop. The mechanism stays commercial and clothing-specific.

How a fake 31354 differs

The link is a Fabletics-shaped trap, not fabletics.com. Watch for domains built to read fast on a phone, such as fabletics-vip-login.com, fabletics-saleclaim.net, fabletics-us.shop, or vip-fabletics-checkout.com. The brand word sits in front. The real control sits somewhere else.
The text turns membership language into a threat. A fake says “VIP account suspended,” “member credit expires in 15 minutes,” or “verify now to prevent cancellation.” Fabletics does use VIP language. Scammers weaponize that exact word because customers know the membership has rules and monthly timing.
The dollar amount is framed like a rescue, not a sale. Treat “claim your $89.95 refund,” “pay $4.99 to release member credit,” or “settle failed VIP billing today” as hostile when it arrives out of nowhere. Fabletics promos sell leggings and sets. Refund and fee lures pull you into a fake checkout.
The page asks for payment before it shows products or account context. A Fabletics shopping page lets you see clothes, sizes, colors, cart details, and account areas. A fake “VIP verification” page jumps straight to card number, CVV, billing ZIP, and sometimes a second card after the first one “fails.”
The sender is a normal phone number or an email-to-text address pretending to be the Fabletics short code. Scammers write “31354” or “Fabletics VIP” inside the message body because they cannot make the sender field match the real short code. Look at the sender line, not the logo text.
The text sells something Fabletics does not sell. Fabletics messages fit activewear, VIP credits, orders, returns, and member pricing. A message about a mystery parcel fee, payroll deposit, crypto reward, customs seizure, court fine, or bank transfer using the Fabletics name is a costume, not a retail alert.
The copy dodges normal Fabletics account routes. Fraud pages push “secure your VIP wallet,” “unlock your member refund,” or “confirm billing to keep your credits” and keep you inside a stripped-down form. Real Fabletics account work belongs inside the Fabletics site experience, with product pages and account sections around it.
The offer is too detached from your Fabletics history. A normal sale text can arrive even if you have not shopped lately, but an account-specific warning needs context. If you have no Fabletics membership, no order, and no stored payment relationship, a “final VIP billing notice” is bait.

What to do now

Classify the sender first. 31354 is leased for Fabletics traffic from TechStyle Fashion Group, so a sale, VIP, order, or membership text from that exact short code fits the legitimate pattern.
Check the job of the message before you touch the link. Shopping offer, member pricing, order context, and Fabletics account language fit. Card rescue, refund claim, locked VIP account, surprise shipping fee, or verification-code demand does not.
Go to fabletics.com yourself to shop or check the account. Type it into the browser or use your saved app route. Do not let a surprise text choose the doorway into your cart, credits, billing page, or password screen.
Use Fabletics support if the message claims an account or billing problem. Contact Fabletics through its published Help Center at https://help.fabletics.com/hc/en-us or call 844-322-5384. Bring the exact wording, sender, time received, and the visible link.
If you entered your Fabletics password through a suspect text, change it from fabletics.com. Then review your Fabletics account for changed email address, shipping address, saved cards, orders you did not place, and member credit activity you do not recognize.
If you entered card details, call the card issuer using the number printed on the card. Ask for a fraud review and watch for small test charges as well as Fabletics-shaped descriptors that do not match your real order history.

Got a text you are unsure about?

Paste it here. Bewary reads it and tells you straight, free.

Sources

What this page checks against.