Phishing & messages
How does SMS sender spoofing work?
Attackers can forge the sender name shown on SMS so a message looks like your bank or courier. Treat the displayed name as unreliable and verify through official apps or numbers you already trust.
What this means for you
A message labelled with your bank or parcel brand can still be fake. Do not trust the sender label alone—especially when it pushes a link or payment.
Detailed explanation
SMS spoofing manipulates the visible sender ID. The text may look official while the link leads to phishing.
Parcel holds, unpaid tolls, tax refunds, and bank “security alerts” are common themes designed to create urgency.
Never call a phone number inside a suspicious SMS. Use the number on your card, statement, or official app.
If a message asks you to move money or share a code, pause—real institutions rarely start sensitive processes that way.
Warning signs and signals
- Unexpected delivery or bank SMS with a short link
- Requests for one-time codes or remote-access apps
- Threats of account closure unless you act immediately
- Sender name matches a brand but the writing style feels off
Practical verification steps
- Open the official app or website yourself to check for real alerts
- Do not tap links in unexpected SMS
- Report spoofed texts through your carrier or national fraud channel when possible
- Scan any remaining URL with Fraudly if you must inspect it
What Fraudly can and cannot verify
Fraudly cannot prove who sent an SMS.
We help you assess linked destinations—not carrier-level sender authenticity.
Key trust concepts
Urgent payment pressure is a social-engineering signal
Real organisations rarely demand immediate payment with threats or secrecy.
Verified identity and trustworthy behaviour are different
Knowing who someone claims to be is not the same as knowing they will treat you fairly.
Related guides
Reviewed: 8 August 2026
This page is educational decision support. It is not legal, financial, or emergency advice.
