Last reviewed July 21, 2026 · United States guidance
A suspicious message does not have to look sloppy. It may use a familiar logo, a local phone number, or your real name. Judge the request, not the appearance.
Seven warning signs
Slow down when a message does any of these
- Creates sudden pressure.
It says an account will close, a package will be returned, or a payment must be made immediately.
- Asks for an unusual payment.
Gift cards, cryptocurrency, wire transfers, and payment apps are common warning signs when a stranger insists on one method.
- Requests private information.
Do not send a password, one-time verification code, Social Security number, bank number, or card details by text.
- Includes an unexpected link or attachment.
A shortened or unfamiliar address can lead to a fake sign-in page or harmful download.
- Claims there is an invoice, delivery, prize, or account problem you did not expect.
These stories are designed to make you act before checking.
- Tells you to keep the request secret.
Pressure not to speak with family, staff, a bank, or another trusted person is a serious warning sign.
- Cannot be verified outside the message.
A real-looking sender name or caller ID is not proof. Use contact information from an official website, app, statement, or the back of your card.
The next five minutes
Check safely without using anything in the text
- Leave the message untouched. Do not reply, click, pay, or use an “unsubscribe” link.
- Find a trusted contact route. Type the organization's known web address yourself, open its official app, or call a number from a statement or card.
- Ask whether the request is real. Describe the message without using its phone number or link.
- Report and delete it. Use your messaging app's spam option, forward spam texts to 7726 (SPAM), and report suspected fraud to the FTC.
If you already clicked
Take the next protective step now
Change it using the official app or website, use a new unique password, and turn on multifactor authentication.
Call the financial institution using the number on your card or statement and explain what happened.
Contact the payment company or financial institution immediately. Ask whether the transaction can be stopped or reversed.
Use the FTC's IdentityTheft.gov recovery steps and keep records of whom you contacted.
Use AI as a second look
A warning-sign check is not a safety guarantee
CalmlyDone can point out urgency, impersonation, secrecy, payment pressure, and requests for sensitive information. It cannot identify every scam or certify that a message is genuine.
Before using the checker: remove names, account numbers, passwords, verification codes, Social Security numbers, bank details, and gift card numbers.
Open the free message checkerOfficial U.S. resources