Skip to main content
Scam Checker
Back to Guides

Scam Text Message Examples: SMS Fraud Patterns Explained

Updated 13 October 2026

Received a dodgy text?

Paste it here and check for scam warning signs.

Check Now →

Australians lose millions to SMS scams every year. These texts look official, create urgency, and lead to fake websites designed to steal your money or identity.

Here's what the most common scam texts look like — and why they work.

Quick Verdict

What it usually is: Phishing attempts designed to steal bank logins, card details, or personal information.

Who gets targeted: Everyone with a mobile phone. Scammers send millions of these daily.

Red Flags to Look For

  • Urgency language — "Immediate action required", "within 24 hours", "account will be suspended"
  • Generic sender — A mobile number (+61 4xx) claiming to be from a bank or government agency
  • Links to click — Real banks and government agencies don't send login links via SMS
  • Requests for codes — No legitimate organisation asks you to share verification codes
  • Spelling and grammar errors — "Your AuPost parcel" or "Confirm you're identity"
  • Unusual domain in link — Look for .xyz, .top, .info, or misspelled brand names
  • Out of the blue — You weren't expecting a parcel or haven't done anything with that service

Realistic Examples

"AusPost: We attempted delivery but no one was home. Reschedule: auspost-redelivery.com/pkg38291"

Red flags: Wrong domain (not auspost.com.au), random tracking format, you weren't expecting a parcel.

"CommBank: Unusual activity detected on your account. Verify immediately: commbank.secure-alert.net"

Red flags: Banks don't send verification links via SMS. Real domain is commbank.com.au.

"ATO: You are entitled to a tax refund of $847.50. Claim within 48hrs: my-gov-refund.com.au"

Red flags: ATO doesn't SMS refund links. Real myGov is my.gov.au (separate words, .gov.au domain).

"Linkt: You have an unpaid toll of $4.50. Pay now to avoid $87 late fee: linkt-pay.net.au"

Red flags: Wrong domain. Real Linkt website is linkt.com.au. Disproportionate "late fee".

"Your Netflix payment failed. Update billing to avoid suspension: netflix-billing.com"

Red flags: An unfamiliar billing link and pressure to act. Netflix does send some texts, including password-reset codes you request. Open the Netflix app or type netflix.com yourself to check your account. Follow Netflix's advice for suspicious messages instead of entering details through an unexpected link.

What to Do Next

  1. Don't click the link — Ever. No exceptions.
  2. Go direct — Open the official app or type the real website yourself.
  3. Check your account legitimately — Log in normally to see if there's actually an issue.
  4. Report suspicious messages — In Australia, use Scamwatch's online reporting form. You can also follow your mobile provider's published reporting instructions.
  5. Block and delete — Don't engage with the sender.

If You Already Clicked

  • Only opened the link: Close the page; do not open unexpected downloads or install anything it suggests. A click alone does not confirm either safety or infection. Keep your device updated. If you suspect harmful software downloaded, follow ACSC's recovery steps for your device; on a computer, update security software and run a scan.
  • Entered login details: Change your password immediately on the real site. Enable 2FA.
  • Entered card details: Call your bank NOW. Cancel the card. Monitor your statements.
  • Entered personal info: Consider a credit ban through Equifax. Watch for identity fraud signs.

Frequently Asked Questions

Why does the text appear in my real bank's message thread?

A sender name or an existing message thread is not enough to verify a request. Australia's sender ID rules changed on 1 July 2026, but you should still check unexpected requests through the organisation's official app or contact details you found independently.

What does an "Unverified" text sender mean in Australia?

From 1 July 2026, unregistered branded SMS/MMS sender IDs appear as "Unverified". This may be a scam or a legitimate organisation that has not registered its sender ID. You do not need to register or change any settings. The scheme does not cover texts from ordinary phone numbers or messaging apps such as WhatsApp, iMessage and Facebook Messenger. A branded sender is not a guarantee that every request is safe. If you are unsure, do not reply, follow the message's links or send money or personal details; contact the organisation independently. See ACMA's guidance on branded and Unverified messages.

How did scammers get my phone number?

Data breaches, social media, or just random generation. Australian mobile numbers follow a predictable pattern (+61 4xx xxx xxx), so scammers send millions of messages hoping some land.

Should I reply to tell them to stop?

No. Replying confirms your number is active and may result in MORE scam attempts. Just block and delete.

Do banks ever send legitimate SMS?

Yes, for transaction alerts or 2FA codes. But they will NEVER include a link to log in or ask you to call a number in the SMS. Always use the number on your card.

Related Guides

Parcel Delivery Scams: Fake Tracking Links and Fee Traps

DHL, FedEx, UPS and postal service SMS scams with fake tracking links and card fee traps.

Bank Impersonation Scams: How Fraudsters Pose as Financial Institutions

Fake bank calls, texts, and spoofed caller IDs explained.

How to Spot a Fake Link Before You Click

Subdomain tricks, lookalike domains, and URL red flags explained.

Suspicious about something you received?

Check what you received for warning signs with our free tool.

Check a text message

Or search the community scam reports and the report lookup.