Red flags in business phone numbers and texts

Phone calls and text messages are how many real businesses reach their customers: appointment reminders, delivery updates, payment receipts, one-time passcodes. That familiarity is exactly why scammers use the same channels. Knowing a few patterns, and one habit that beats almost all of them, will help you tell the difference.

The one habit that matters most

If a call or text asks you to do something, such as pay, log in, confirm details or call back, do not use the number or link in the message. Instead, find the business's contact details yourself: from a bill or card you already have, from its official website typed into your browser, or from an independent listing. Then contact it directly and ask whether the message is real.

You can search a business on CheckThisBiz to find its listed phone number and website, and compare them with the ones in the message.

Why caller ID is not proof

The name and number that appear on your screen can be spoofed. Scammers can make a call look like it comes from your bank, a government agency, a utility or a local business, and sometimes from a number with your own area code. The Federal Communications Commission warns about this practice. A familiar name on the screen tells you what the caller wants you to believe, not who is calling.

Red flags in calls

• Urgency and threats. "Your account will be closed today." "A warrant has been issued." "Your power will be shut off in an hour." Pressure is designed to stop you from checking.
• Unusual payment methods. Requests to pay with gift cards, wire transfers, cryptocurrency, or a payment app transfer to a person are a strong warning sign. Utilities, government agencies and established businesses do not ask to be paid in gift cards.
• Requests for codes. A one-time passcode sent to your phone is meant for you only. Anyone who asks you to read one back to them, even someone claiming to be from the company that sent it, is likely trying to get into your account.
• Asking you to stay on the line. Being told not to hang up, or not to tell anyone, is a way to keep you from verifying.
• Prize and refund offers. Unexpected winnings, overpayment refunds and "you are owed money" calls that require a fee or your account details first.

Red flags in text messages

• Links you did not expect. A text about a missed delivery, a toll you owe, a locked account or a suspicious charge, with a link to "fix it", is one of the most common scam formats. Go to the company's site or app directly instead.
• Odd web addresses. Shortened links, misspelled brand names, or addresses where the real company name appears only at the start (as in company.example-pay.com) are warning signs.
• Wrong-number openers. A friendly "Is this Sam?" from a stranger can be the start of a long-running scam that eventually turns to investments or money requests.
• Replies that confirm you exist. Replying to an unknown sender, even with "STOP", can confirm that your number is active. Use STOP for messages from businesses you actually signed up with; for unknown senders, block and report instead.

What a phone number itself can and cannot tell you

• A toll-free number is not a sign of legitimacy. Anyone can get one cheaply.
• A local area code is not proof of a local business. Numbers can be obtained for almost any area code and are easily spoofed.
• A mismatched area code is not proof of a scam. People keep their mobile numbers when they move, and many businesses use call centers or virtual phone systems.
• A number that matches independent listings is a good sign. If the number on a flyer, website or invoice is the same one that appears in the business's public listings, and it answers with the business name, that consistency is reassuring.
• A number tied to many different business names across the web is worth a second look.

How to report it

• Spam texts: Most major US mobile carriers let you forward spam texts to 7726 (which spells SPAM on a keypad). Your phone's messaging app may also have a "report junk" option.
• Scams: Report them to the Federal Trade Commission at ReportFraud.ftc.gov.
• Impersonation of a real business: Tell the business, using contact details you found yourself. It helps them warn other customers.
• If you already paid or shared details: Call your bank or card issuer right away using the number on your card, and change any passwords you shared.

For business owners: make your real messages easy to trust

If you text or call customers, you can help them tell you apart from impostors. Use a consistent number that matches your public listings. Identify your business by name at the start of every message. Tell customers what you will never ask for, such as passwords or gift card payments. Avoid sending shortened links when you can, and invite customers to call your listed number if they are unsure.

The short version

Caller ID and message text are easy to fake. Your own lookup is not. When in doubt, hang up, look the business up, and contact it directly. Find a business's listed number on CheckThisBiz, and read the CheckThisBiz methodology to see how listings are checked.