SMS from a stranger with a link: how to tell if it is a scam

SMS from a stranger with a link: how to tell if it is a scam

"Your parcel is on hold", "your account has been restricted", "update your BVN now"... followed by a link. Smishing (phishing by text message) is everywhere, and reports from the NoCall community confirm it: when an unexpected SMS carries a link, the rule is to distrust first and verify after.

1. The 4 smishing signs

• You were not expecting it — you ordered no parcel and started no process.
• It rushes you — "within 24 hours", "final notice", "your account will be blocked".
• The sender does not add up — an ordinary mobile number instead of the bank's or the company's name.
• It asks for details or a payment — no genuine bank or government agency asks for your PIN or OTP by SMS.

2. Inspect the link without tapping

Long-press the link to see the full address without opening it. Be wary of misspelt names (a zero in place of an "o", for example), URL shorteners and strange endings. When in doubt, open the official app or type the address yourself: never go in through the link in the SMS.

3. If you already tapped

Do not enter any details and close the page. If you gave banking details, call your bank as soon as possible; if you installed an app, remove it and run a security scan.

4. Report the SMS

Block the sender and report it on NoCall with a screenshot to warn other users. If unwanted messages keep coming, complain to your network first and, if it does not resolve it, escalate to the Nigerian Communications Commission (NCC) on its toll-free 622 line, as set out in the NCC complaint procedure. If you lost money, report it to the police through the NPF-NCCC e-reporting portal.

How do I know if an SMS with a link is a scam?

Be suspicious if you were not expecting the message, it rushes you ("your account will be blocked"), the sender is an ordinary mobile number or the link points to a strange domain. Banks and government agencies do not ask for your PIN or OTP by SMS.

I tapped a suspicious link. What do I do?

Do not enter any details, close the page and do not download any files. If you gave banking details, call your bank immediately; if you installed an app, remove it and run a security scan.

Where do I report a smishing SMS?

Report it on NoCall with a screenshot, tell your network and, if the messages continue, escalate to the NCC on 622. If you lost money, report it to the police through the NPF-NCCC portal.