Scam Text Message Examples: SMS Fraud Patterns Explained
Updated 26 January 2026
Australians lose millions to SMS scams every year. These texts look official, create urgency, and lead to fake websites designed to steal your money or identity.
Here's what the most common scam texts look like — and why they work.
Quick Verdict
What it usually is: Phishing attempts designed to steal bank logins, card details, or personal information.
Who gets targeted: Everyone with a mobile phone. Scammers send millions of these daily.
Red Flags to Look For
- Urgency language — "Immediate action required", "within 24 hours", "account will be suspended"
- Generic sender — A mobile number (+61 4xx) claiming to be from a bank or government agency
- Links to click — Real banks and government agencies don't send login links via SMS
- Requests for codes — No legitimate organisation asks you to share verification codes
- Spelling and grammar errors — "Your AuPost parcel" or "Confirm you're identity"
- Unusual domain in link — Look for .xyz, .top, .info, or misspelled brand names
- Out of the blue — You weren't expecting a parcel or haven't done anything with that service
Realistic Examples
"AusPost: We attempted delivery but no one was home. Reschedule: auspost-redelivery.com/pkg38291"
Red flags: Wrong domain (not auspost.com.au), random tracking format, you weren't expecting a parcel.
"CommBank: Unusual activity detected on your account. Verify immediately: commbank.secure-alert.net"
Red flags: Banks don't send verification links via SMS. Real domain is commbank.com.au.
"ATO: You are entitled to a tax refund of $847.50. Claim within 48hrs: my-gov-refund.com.au"
Red flags: ATO doesn't SMS refund links. Real myGov is my.gov.au (separate words, .gov.au domain).
"Linkt: You have an unpaid toll of $4.50. Pay now to avoid $87 late fee: linkt-pay.net.au"
Red flags: Wrong domain. Real Linkt website is linkt.com.au. Disproportionate "late fee".
"Your Netflix payment failed. Update billing to avoid suspension: netflix-billing.com"
Red flags: Netflix doesn't send SMS. Real domain is netflix.com. Check your account directly.
What to Do Next
- Don't click the link — Ever. No exceptions.
- Go direct — Open the official app or type the real website yourself.
- Check your account legitimately — Log in normally to see if there's actually an issue.
- Report it — Forward scam SMS to 0429 999 888 (Scamwatch).
- Block and delete — Don't engage with the sender.
If You Already Clicked
- Didn't enter anything: You're probably fine. Close the page and clear your browser history.
- Entered login details: Change your password immediately on the real site. Enable 2FA.
- Entered card details: Call your bank NOW. Cancel the card. Monitor your statements.
- Entered personal info: Consider a credit ban through Equifax. Watch for identity fraud signs.
Frequently Asked Questions
Why does the text appear in my real bank's message thread?
Scammers can spoof sender IDs. A text labelled "CommBank" might not actually be from CommBank. This is called sender ID spoofing and it's disturbingly easy to do.
How did scammers get my phone number?
Data breaches, social media, or just random generation. Australian mobile numbers follow a predictable pattern (+61 4xx xxx xxx), so scammers send millions of messages hoping some land.
Should I reply to tell them to stop?
No. Replying confirms your number is active and may result in MORE scam attempts. Just block and delete.
Do banks ever send legitimate SMS?
Yes, for transaction alerts or 2FA codes. But they will NEVER include a link to log in or ask you to call a number in the SMS. Always use the number on your card.
Related Guides
Parcel Delivery Scams: Fake Tracking Links and Fee Traps
DHL, FedEx, UPS and postal service SMS scams with fake tracking links and card fee traps.
Bank Impersonation Scams: How Fraudsters Pose as Financial Institutions
Fake bank calls, texts, and spoofed caller IDs explained.
How to Spot a Fake Link Before You Click
Subdomain tricks, lookalike domains, and URL red flags explained.
Suspicious about a message you received?
Don't guess. Check it instantly with our free tool.
Check for Scam