How to Spot a Fake Verification Text Message

Fake verification texts push you to tap a link, call a number or share a code. Real ones just give a code. Here are the warning signs.

Warning signs

• A link to "confirm", "unlock" or "verify" your account.
• Urgency: "your account will be closed today".
• A code you did not ask for, followed by someone asking for it.
• Spelling mistakes, or an address that is almost the real one.
• Requests for passwords, card numbers or payment.

What real code texts look like

A short message with the code, the app name and "do not share". Often a short code sender. Usually no link, or only the app's own short link.

If you tapped a link

1. Do not enter anything.
2. If you did, change that password at once, using the real app.
3. Turn on two-step verification with an authenticator app.
4. Report the text: forward to 7726 in the US and UK.

See blocking spam texts.

Check the address carefully

Fake links often use a real brand name with an extra word or a different ending. Long-press the link to preview it, or skip it entirely and open the app yourself.

FAQ

How can I tell if a verification text is fake?

Fake ones push you to tap a link, call, pay or share the code.

Do real code texts contain links?

Rarely, and only to the company's own short domain.

What if I entered my password on a fake page?

Change it immediately and turn on two-step sign-in.

Related: code scams · block spam texts · OTP texts.