SMS from an unknown number with a link: how to tell if it is a scam
You get an unexpected SMS with a link: a parcel, your bank, SARS or a fine. Learn how to spot smishing before you tap.
Summarize this article with
SMS from an unknown number with a link: how to tell if it is a scam
"Your parcel is on hold", "your account will be blocked", "you have an unpaid traffic fine"... followed by a link. Smishing (phishing by SMS) shows up again and again in reports from the NoCall community, and the rule is simple: when an unexpected SMS carries a link, distrust it first and check afterwards.
1. The 4 signs of smishing
- You were not expecting it: you did not order a parcel or start any process.
- It rushes you: "within 24 hours", "final notice", "account suspended".
- The sender does not add up: an ordinary cellphone number instead of the name of the bank or company.
- It asks for details or a payment: no bank, no SARS and no other official body asks for passwords or OTPs by SMS.
2. Check the link without tapping it
Press and hold the link to see the full address without opening it. Be wary of misspelt domains, link shorteners and strange endings. When in doubt, open the official app or type the address yourself: never go in through the link in the SMS.
3. If you already tapped
Do not enter any details, and close the page. If you gave banking details or an OTP, call your bank's fraud line as soon as possible (the number on the back of your card); if you installed an app, remove it and run an antivirus scan.
4. Report the SMS
Block the sender and report it on NoCall with a screenshot to warn other users. If it pretends to be SARS, forward it to [email protected], as SARS asks on its scams and phishing page. If you lost money, open a case at your nearest police station (SAPS).
How do I know if an SMS with a link is a scam?
Be suspicious if you were not expecting it, it rushes you ("your account will be blocked"), the sender is an ordinary cellphone number or the link points to a strange domain. Banks and official bodies never ask for passwords or OTPs by SMS.
I tapped a suspicious link: what do I do?
Do not enter any details, close the page and do not download anything. If you gave banking details, call your bank straight away; if you installed an app, remove it and run an antivirus scan.
Where do I report a smishing SMS?
Report it on NoCall with a screenshot, forward SARS lookalikes to [email protected] and, if you lost money, open a case with SAPS.
Sources and review
Reviewed:
Numbering, carrier tools, and reporting procedures can change. Verify sensitive steps with the linked primary authority.
Article details
Editorial content reviewed by NoCall with practical context for spotting suspicious calls and messages.
Received a suspicious call?
Look up the number in NoCall before sharing data, calling back, or clicking any link.
Search a phone number or a company name (Eskom, Vodacom and MTN...) to check if it has been reported as spam.