How to Not Fall for Fake Text and Phone Call Scams
By Ricky Browning · Browning PC, Valdosta, GA
Here's the whole thing in one rule: if a text or a call pressures you to act right now, stop — then verify it yourself on a number you look up. Hang up and call the number on the back of your card, not the one they gave you. Never read a verification code to anybody. And nobody legitimate will ever demand a gift card, wire, or crypto. That one habit beats almost every scam below.
The business version of this is Business Email Compromise, and the FBI logged over $3 billion in losses from it in 2025 alone — see the latest small business tech news for the numbers and the one free habit that stops it.
I want to say something before we get into it: getting fooled by one of these doesn't make you dumb. I've had sharp, careful people sit across from me in the shop — a retired teacher, a business owner who runs a tight ship — absolutely sick about a text they tapped. These things are built by people who do this all day, every day, for a living. They're designed to catch you on your worst thirty seconds: kid's hollering, you're backing out of the driveway, phone buzzes. So let's just talk about how they work.
How bad is this, really?
Bad, and growing. Americans reported losing $15.9 billion to fraud in 2025 across 3 million reports — up from $12.5 billion the year before, and the highest on record (FTC testimony to the Joint Economic Committee, March 2026). Imposter scams — somebody pretending to be your bank, Amazon, or the government — were the single most-reported kind, making up nearly one in three fraud reports and $3.5 billion in losses.
Two honest caveats I'd rather give you than hide, because they cut in opposite directions. First, that number is understated: the FTC notes it didn't collect reports during the 2025 government shutdown, and its own cited research suggests only about 4.8% of mass-market fraud victims ever report it to the government or a BBB at all. Second, the FTC's detailed annual Data Book for 2025 isn't published yet — so where I quote a median loss below, it's 2024 data, and I've labeled it.
Here's the stat that should shape your habits: when the FTC last broke losses down by how the scammer reached people, phone calls had the highest median loss of any contact method — $1,500, versus $1,000 for texts and $600 for email (FTC Consumer Sentinel Data Book, 2024 data). Texts are how they reach the most people. Calls are how they take the most money from the ones they catch.
Why these are so much more convincing now
- The number on your screen means nothing. Caller ID is trivially faked. A scammer can make your bank's real customer-service number — the one printed on your card — show up on your phone. This is the single most important thing to internalize.
- They're cheap to send by the million. Texting a hundred thousand people costs about nothing. They don't need a good hit rate.
- Voices can be faked. Both the FTC (2023) and the FBI (IC3 alert, December 2024) have formally warned that scammers use a short audio clip of someone's voice to clone it for a panicked "it's me, I'm in trouble" call. Straight talk: you've probably seen "they only need 3 seconds of audio" going around — no federal agency actually says that. The FTC and FBI both just say "a short audio clip." I'm not going to make up a number.
The scams actually hitting people right now
These are the ones landing in real phones today, per the FTC and the FBI's Internet Crime Complaint Center (IC3). Two of them probably hit your phone this week.
| # | The text | What it's really after |
|---|---|---|
| 1 | Fake package problem — "USPS couldn't deliver your package, update your address" | A small "redelivery fee" — really your card number, sometimes your SSN |
| 2 | Phony job offer — easy work-from-home, great pay, no details | Task-scam setup: small payouts to build trust, then you deposit money |
| 3 | Bank fraud alert — "Did you authorize a $1,200 purchase? Reply YES/NO" | Your reply routes you to a fake fraud department that "helps" you move money |
| 4 | Unpaid toll — a few dollars owed, late fee threatened | Card details on a lookalike toll site |
| 5 | "Wrong number" — a friendly "hey, is this Sarah?" | A slow-built fake friendship that ends in a bogus crypto investment |
A few specifics worth knowing:
- The toll text. The FBI put out an alert on this in April 2024 and it never left — it just rotates state to state, always naming whatever toll service sounds right for where you are. The Postal Inspection Service is blunt about the package version: USPS will not text you unless you asked it to, and it will not contain a link.
- The newest twist: a court summons by QR code. The FTC reported a spike in these just recently — a text with a state seal, a fake case number, a hearing date, and threats of a default judgment, with a QR code to scan. Same trick in a suit and tie.
- Bank impersonation is where the real money goes. Of nearly $1 billion lost to business impersonators in 2025, the FTC says the highest losses were to people impersonating banks. The tell is always the same: they want you to move your money somewhere "safe."
- Tech support scams are enormous — $2.13 billion reported to IC3 in 2025 — and they hit older folks hardest. It usually starts with a scary pop-up and a number to call. (If a pop-up says your computer's infected, that pop-up is the problem — here's how to tell a real infection from a fake warning.)
- The "grandparent" call — a panicked grandkid in jail, don't tell Mom, wire money now — now sometimes uses a cloned voice. In fairness: the FBI logged just over $5 million in losses to these "distress" scams in 2025. That's real people devastated, but it's rare next to bank impersonation. Don't let it scare you off the phone; just have a plan (below).
And the one that hurts most: fraud against people 60 and up hit $7.7 billion in 2025 across 201,266 complaints — a 59% jump in losses — with an average loss of $38,500 (FBI IC3 Elder Fraud Report). If you've got parents in Valdosta or Hahira, that number is the reason to have this conversation with them this week.
The tells — what a scam always has
You don't need to recognize every scam. You need to recognize the shape. Nearly all of them have several of these:
- Urgency. Act now or the account closes / you're arrested / the fee doubles. The FTC's own headline on this is perfect: "You don't need to decide now." The rush is the attack — it exists to keep you from thinking.
- Secrecy. "Don't tell your husband." "Don't tell the teller what it's for." No legitimate business has ever needed you to lie to your family.
- A link you didn't ask for in a text you weren't expecting.
- They want a code. Anyone asking you to read back a verification code is a scammer. Full stop.
- Weird payment. Gift cards, wire, crypto, a Bitcoin ATM, cash in an envelope, a payment app. The FTC's heading says it all: "Only scammers demand you pay certain ways." They pick these because the money is gone the second it moves.
- "Move your money to protect it." This is always a scam. As Bank of America puts it in their own guidance: your bank "should never ask you to transfer money to anyone, including yourself."
- A stranger who gets friendly fast — especially one who wandered in on a "wrong number" and eventually mentions how well their investments are doing.
What to do instead (the part that actually works)
Hang up. Call back on a number you looked up.
This one habit defeats nearly every impersonation scam, because it doesn't matter how convincing they are — you're no longer talking to them. The FCC says it plainly: "hang up and call them back using a valid number found on their website or on your latest bill." The FTC says the same for your bank: use a number you trust, "like the one on your statement or in your app." Never the number they gave you, and never the one on your caller ID.
Never give out a verification code.
The FTC: "Anyone who asks you for your account verification code is a scammer." That code is the key to your account — it's why they want it. One honest wrinkle worth knowing: if you called your bank, they may legitimately ask you to enter a code to prove it's you. The rule that never breaks is that nobody who contacts you first should ever get it.
Don't tap links in unexpected texts.
The FTC: "Legitimate companies won't ask for information about your account by text." If you think it might be real — maybe you are expecting a package — don't use the link. Open the company's app, or type their address in yourself. Takes twenty seconds.
Pick a family safe word. Tonight.
This is the FBI's number-one tip for the cloned-voice emergency call, straight from their December 2024 alert: "Create a secret word or phrase with your family to verify their identity." Something no scraper could guess — an inside joke, the name of a dog you had in 2004. If a panicked "family member" calls for money and can't say it, you already know. It costs nothing and it takes one dinner conversation.
Slow it down.
You are allowed to say "I'll call you back," and hang up on anybody. A real bank, a real sheriff, a real utility — none of them mind you verifying. Only a scammer fights you on it. If you want a second opinion before you move a dime, call somebody you trust. Honestly? Call me. I'd much rather spend five minutes on the phone than see it after.
What if you already clicked or paid?
First — breathe. Clicking a link by itself often does nothing at all. Move fast on the things that matter:
- If you gave card or bank details: call your bank right now, on the number on your card. Ask them to stop the payment and watch the account. Worth knowing: bank accounts have fewer protections than credit cards, so speed matters more there.
- If you paid by gift card: call the card company immediately and tell them it was a fraudulent charge — the FTC says it's worth asking no matter how you paid, and to keep the card and the receipt. Sometimes the money is still recoverable.
- If you gave a password: change it now, and anywhere else you used that same password.
- If you gave your Social Security number: go to IdentityTheft.gov — it walks you through a recovery plan.
- If something downloaded: run a security scan and remove what it finds. Or bring it to me and I'll check it properly.
- Then watch out for the second wave. The FTC warns that if someone calls offering to help you recover money you lost, that's a fake refund scam. Scammers keep lists of people who already paid once.
How do I report a scam text or call?
- Forward the text to 7726 (it spells SPAM). Both the FCC and FTC recommend it. Fair warning on what it does: it goes to your cell carrier to sharpen their spam filters — not to a government agency.
- Report the scam at reportfraud.ftc.gov. Type that address in yourself — there are lookalike domains fishing for people doing exactly this. The FTC won't work your individual case, but reports are what build the data everybody uses.
- If you actually lost money, also file with the FBI at ic3.gov. Rule of thumb: FTC for the attempt, IC3 when there's money gone. Filing both is fine.
- In Georgia: the Attorney General's Consumer Protection Division takes complaints at (404) 651-8600, or (800) 869-1123 toll-free in state, and online at consumer.georgia.gov. They handle personal/household consumer matters.
- Don't bother with the Do Not Call list for this. It's a fine thing to be on, but the FTC says outright that it "won't stop calls from scammers making illegal calls." Criminals don't check the list.
If you run a business, add these three
- "The boss needs gift cards." A text from your name, urgent, quiet, buy gift cards for a client. Tell your crew now: that text is always fake, and nobody gets in trouble for calling you to check.
- The vendor bank-change call. Somebody emails or calls to update where you send payment. Always verify by calling the vendor on the number you already had — never the one in the message. This one costs local businesses real money.
- Code phishing on your staff. Same rule as home: nobody calls your employees and asks for the code that just texted them.
Tightening this up is part of what I do for local shops — see our cybersecurity services if you want a hand.
The short version
Scammers are counting on speed, fear, and a number on your screen that looks right. Take those away and they've got nothing. Hang up. Look up the number yourself. Never give out a code. Never pay in gift cards. And if something feels off — that feeling is usually right.
🔒 Got a text or call that felt wrong? Ask me before you pay anybody.
Seriously — forward it to me, or call and read it to me. I'd rather spend five minutes telling you it's fake than spend an afternoon cleaning up after it. I also help folks around Valdosta and Hahira lock down a parent's phone and set up the kind of guardrails that stop this stuff cold. No contracts, no pressure — just your local South Georgia tech guy.
📞 229-561-1674 ·
📅 Book an appointment
Frequently Asked Questions
How can I tell if a text is a scam?
If it's unexpected and it wants you to click a link, it's suspect. The FTC's rule is blunt: legitimate companies won't ask for information about your account by text. Real tells are a link you didn't ask for, urgency, a small fee to fix a problem you didn't know you had, and a demand for payment by gift card, wire, crypto, or a payment app. Don't click — look the company up yourself.
My bank called about fraud. Is it real?
Maybe — but caller ID can be faked, including your bank's own number, so the number proves nothing. Hang up and call the number on the back of your card or on your statement. The FCC's guidance is to hang up and call back using a valid number from the company's website or your latest bill. A real bank will never ask you to move money to "protect" it, and never asks for a verification code.
Should I ever give someone a verification code from a text?
No — not to anyone who contacted you. The FTC puts it plainly: anyone who asks you for your account verification code is a scammer. The one honest wrinkle: if you called your bank yourself, they may legitimately ask you to enter a passcode to verify it's you. The rule that always holds is that nobody who calls or texts you should ever get that code.
I clicked a link in a scam text. What should I do?
Don't panic — clicking alone often does nothing. If you entered a password, change it right away (and anywhere else you reused it). If you entered card details, call your bank. If you gave out your Social Security number, go to IdentityTheft.gov. If something downloaded, run a security scan. Then watch your accounts closely for a few weeks.
How do I report a scam text or call?
Forward the scam text to 7726 (it spells SPAM) — that goes to your cell carrier and helps them filter it, and the FCC and FTC both recommend it. Report the scam itself at reportfraud.ftc.gov. If you actually lost money, also file with the FBI at ic3.gov. In Georgia, you can contact the Attorney General's Consumer Protection Division at (404) 651-8600, or (800) 869-1123 toll-free in state.
Can scammers really fake my family member's voice?
Yes, and both the FTC and FBI have warned about it — scammers use a short audio clip of someone's voice to fake a panicked call. Keep it in perspective: the FBI logged just over $5 million in losses to these "distress" scams in 2025, so it's rare compared to bank impersonation. The FBI's first tip is simple: agree on a secret word with your family to verify each other.