Call and Text Scams: Spoofed Numbers, Fake Deliveries and Code Requests
Phone scams rely on borrowed trust: a familiar name on the screen, an urgent problem, and a request that has to happen right now. Knowing the patterns takes away most of their power.
The names for it
Scams over voice calls are often called voice phishing, or vishing; the text-message version is SMS phishing, or smishing. Both are forms of social engineering: the goal is to make you hand over money, a code or a password yourself, because that is easier than breaking into anything.
Why the caller ID can lie
Caller ID spoofing is the practice of making a call display a number other than the one it really came from. That means a call can appear to come from your bank, a government office or even a contact you know. The number on the screen is a claim, not proof. Some text messages can also appear inside an existing thread from a genuine sender name.
Patterns that repeat
- The parcel problem. A text says a delivery failed and asks you to pay a small fee or confirm your address through a link.
- The account alert. A caller says suspicious activity was found and they need to "verify" you with the code you are about to receive. That code is really your login or payment approval.
- The family emergency. A message from an unknown number claims to be a relative with a new phone who urgently needs money.
- The refund or prize. You are owed money, but first a small fee or your card details are needed.
- The remote-access request. A "technician" asks you to install an app so they can fix a problem on your device.
The three questions that stop most scams
- Did I start this contact? If not, be suspicious by default.
- Is there pressure to act immediately? Urgency is the scammer's main tool.
- Am I being asked for a code, a password, a payment or an app install? A genuine organisation rarely needs any of these over an unsolicited call.
What to do instead
Hang up or stop replying. Then contact the organisation yourself, using the number on your card, a statement or the organisation's own app, never a number or link from the message. For a "family member", call their old number or ask a question only they could answer.
If you already responded
- Contact your bank or card provider straight away using the number on your card.
- Change the password of any account you gave details for, and sign out other sessions.
- If you shared a code, check the account for new devices, forwarding rules or changed recovery details.
- Report the message using your phone's report-spam option and your carrier's reporting route.
Being targeted says nothing about your intelligence. These scripts are rehearsed and refined. Talking about them openly with family is one of the most effective defences.