By Alec Cudworth

In today’s digital world, text message scams—also known as smishing (SMS phishing)—are becoming increasingly common. Cybercriminals impersonate trusted companies to trick individuals into revealing personal information, clicking malicious links, or making fraudulent payments.

A perfect example of this is the message I received, which appears to be from EVRI (a well-known parcel delivery service) but is actually a scam. Having taken the time to visit EVRI’s website, they have a helpful page warning customers of fraud types, what to do in the event of calls, texts and emails. How to spot and report fraud | Digital Security | Evri

Now let’s break down how to recognize fraudulent messages and the best practices to protect yourself from falling victim.

How to Spot a Scam Text Message

• Suspicious Sender – The message comes from an unknown number or email (e.g., the sender in the image has a random Gmail address, which is unusual for a legitimate company).
• Urgent Language & Threats – Scammers often create a sense of urgency, pressuring you to act immediately (e.g., “Update your address now or your package will be returned”).
• Suspicious Links – The link provided does not match the official website (e.g., the URL in the image is not a legitimate EVRI domain having checked Evri website).
• Grammar & Spelling Mistakes – Professional companies maintain high standards in their communications, whereas scammers often make errors.
• Unusual Instructions – The message tells you to reply “Y” or to take extra steps to activate a link, which is uncommon in official communications.

Best Practices to Avoid Being Scammed

Never Click Suspicious Links

If you receive an unexpected message with a link, do not click it. Instead, visit the official website by typing the correct URL manually in your browser.

Verify with the Company

If a message claims to be from a delivery service, bank, or any other company, contact them directly through their official customer support.

Do Not Share Personal Information

Legitimate companies will never ask for sensitive details like passwords, bank information, or full addresses via text message.

Report the Scam

• Forward the message to 7726 (SPAM), a free service that helps mobile providers track scams.
• Report it to the company being impersonated (e.g., EVRI, Royal Mail, or your bank).
• Block the sender to prevent further attempts.

Enable Security Features on Your Phone

• Activate spam filters on your messaging app.
• Use two-factor authentication (2FA) for important accounts.
• Regularly update your phone’s security settings.

What to Do If You’ve Already Clicked a Scam Link

If you mistakenly click on a fraudulent link or provide sensitive information:

• Immediately reset your passwords for any accounts that might be compromised.
• Check your bank statements for unauthorized transactions.
• Run a malware scan if you entered personal details on a suspicious site.
• Inform your bank or any relevant organization about the scam such as Action Fraud

Final Thoughts

Cybercriminals are constantly evolving their tactics, but by staying informed and cautious, you can protect yourself and others from falling victim to smishing scams. If something feels off about a text message, trust your instincts—delete it, report it, and move on!

By sharing this awareness, we can help prevent fraud and keep our digital world safer.