Last spring my mom texted me a screenshot of a message claiming her debit card had been "temporarily locked" and that she had fifteen minutes to confirm her identity. She lives two hours away from us in Minnesota, so I could not look over her shoulder — I could only read the words on my screen and hear the worry behind them. I spent eleven years training people to use patient portals and answering support calls at a regional health system, and that work taught me something useful: panic makes every screen look official. Learning how to tell if a text message is a scam comes down to noticing a few small details, then slowing down long enough to check them.
That is the whole plan here. No scare tactics, no jargon — just the patterns I look at and the one phone call that settles the question.
The Five Red Flags I Look At Before Anything Else
A bank-impersonation text almost always gives itself away in the first two lines. Read it once for the jolt, then read it a second time for these five patterns.
Red flag | What the fake message says | What a real bank notice usually looks like |
|---|---|---|
Urgency | "Act within 15 minutes or your account will be closed" | A routine notice with no countdown |
An unexpected link | A shortened address you do not recognize | A nudge to sign in through the app or the bank's own website |
A request for a code or personal details | "Reply with the code we just sent you" | Never asks you to reply with a code |
An unusual sender | A random ten-digit number or a strange email address | The short code your bank has used for years |
A generic greeting | "Dear Valued Customer" | Often includes part of your name, though not always |
One flag is worth a pause. Two flags together mean the message gets no answer from me. My own rule is short enough to remember at the kitchen counter: urgency plus a link means stop reading. That is the practical side of how to tell if a text message is a scam — the clues sit inside the message itself, and none of them require a special app.
Here is the part that catches people off guard. Real banks do send texts, and genuine fraud alerts are real — one may arrive while you are standing in a checkout line with a cart full of groceries. So the goal is not to distrust everything your bank sends. The goal is to notice that no legitimate alert needs an answer before you have had a chance to check it. A bank can wait fifteen minutes for you to call back. A thief cannot.
What Your Bank Will Never Ask You For in a Text
A real bank already knows your account number, your date of birth, and your mailing address. If a message is asking you to supply those things, the message is telling you something about itself. Here is what I treat as a full stop, every time.
Your full Social Security number
Your online banking password or your card PIN
The one-time passcode that just arrived on your phone
Your complete card number, expiration date, and security code together
A payment by gift card, wire transfer, or cryptocurrency to "unlock" an account
If you want one habit that does more for how to avoid online scams for seniors than any app I could name, it is this: never hand information to someone who contacted you. Give information only when you placed the call yourself, using a number you looked up on your own card or statement. That single rule covers bank texts, delivery texts, and most of the phone calls that follow them.
The Safe Response: Call the Number on Your Card
Do not call the number in the text, and do not reply to it. Instead, do this.
Take a screenshot of the message, so you have a record if you want to report it later
Do not tap any link in the message, not even once to "see what happens"
Dial the number printed on the back of your card or on your most recent statement
Ask one plain question: "Did you send me a text about my account today?"
Keep your card in your wallet while you wait on hold — there is no emergency
That last point matters more than it sounds. When my mom finally called the number printed on her card, a real person answered, looked at her account, and told her nothing was wrong. No lock, no hold, no fifteen-minute deadline. The whole call took six minutes, and she spent the rest of the afternoon in her garden instead of worrying. One phone call does more for how to tell if a text message is a scam than an hour of comparing screenshots online.
Reporting the Message to 7726 and to Your Bank
Forward the suspicious text to 7726. That number spells SPAM on a phone keypad, and it is a free reporting short code used by the major US carriers. It works on iPhones and Android phones alike, you do not need to add any explanation, and you will not be charged.
After you forward it:
Delete the message from your phone
Tell your bank's fraud line what the message said, even if nothing was taken
If you did tap a link and typed anything at all, call the bank the same day
If money moved, ask the bank to open a fraud case and write down the case number
Forwarding a message does not undo anything by itself. What it does is help carriers identify and block numbers that are being used this way, and it takes about ten seconds. My daughter Lila, who is twelve, learned to do it after a fake delivery text reached her grandmother's phone during a visit, and now she checks the process the way she checks her math homework.
Making It a Family Habit
I keep a handwritten list beside my laptop titled "things Mom may ask about," and bank texts have landed on it twice this year. Every question on that list turns out to be a version of the same question: is this real? Evan and I use one house rule with our kids and with both sets of parents, and it fits in a single sentence. Nobody taps a link in a text from a company, no matter how official the message looks.
The rule sounds almost silly until the day it saves someone a weekend of phone calls. If someone is rushing you, that is a reason to slow down. A real bank, a real utility company, a real delivery service — none of them will be annoyed that you took five extra minutes to check. Let's make the next click the easy one.