Unknown Number Texted Me: What to Do

<p>Receiving a text from a number you do not recognize is common enough that most people treat it as background noise. That instinct is mostly correct — a significant portion of unknown texts are harmless: a delivery notification from a shipping service you did not know used that number, an automated two-factor code from an app you signed up for, a genuine wrong-number message meant for someone else.</p> <p>But some unknown texts are not harmless. Smishing — phishing conducted via SMS — is one of the most prevalent forms of consumer fraud in the United States. The decision framework below helps you move methodically from receiving an unknown text to deciding what to do about it.</p> <h2>Step 1: Don't Reply Immediately</h2> <p>The strongest impulse when you receive an unfamiliar text — especially one that references something urgent — is to respond immediately. Resist that impulse long enough to run through the steps below.</p> <p>Replying to a spam or scam text has two consequences that most people do not consider in the moment. First, it confirms to the sender that your number is active and monitored by a real person, increasing your value to that list. Second, some smishing campaigns are designed so that engagement, rather than a specific click, is the goal — once you are in a conversation with a scam operator, the social engineering begins.</p> <h2>Step 2: Look Up the Number</h2> <p>Before replying, run the number through <a href="/who-texted-me">Who Sent That Text Message</a> or a similar lookup service. Enter the full 10-digit number and review what comes back.</p> <p><strong>What to look for:</strong></p> <ul> <li><strong>Registered name</strong> — is there a business name or personal name on file? A recognizable name that matches the message content (e.g., a pharmacy name with a prescription notification) resolves most cases quickly.</li> <li><strong>Line type</strong> — is the number a mobile line, landline, or VoIP? A VoIP number combined with a message asking you to take an action is worth additional scrutiny.</li> <li><strong>Spam reports</strong> — have other users flagged this number? What for? Specific report descriptions often identify the fraud campaign type clearly. See <a href="/features/spam-detection">How WSTTM Spam Detection Works</a>.</li> </ul> <p>The lookup takes under a minute. In most cases, the result is either confirming (recognizable business, no reports) or clarifying (VoIP number, 47 spam reports in the past week). See also: <a href="/learn/how-to-identify-text-message-sender">How to Identify a Text Message Sender</a> for a deeper dive on interpreting lookup results.</p> <h2>Step 3: Read the Message Carefully for Red Flags</h2> <p>If the lookup did not resolve the question definitively, read the message itself with the following checklist in mind:</p> <ul> <li><strong>Urgency language</strong> — phrases like "respond within 24 hours," "your account will be suspended," "immediate action required," or "final notice."</li> <li><strong>Prize or reward claims</strong> — "You have been selected," "Congratulations, you've won," "Claim your gift card." These are uniformly fraudulent unless you entered a specific, verifiable sweepstakes.</li> <li><strong>"Your account" language from services you do not use</strong> — a message about your Netflix account when you do not have Netflix, a bank you do not bank with.</li> <li><strong>A link to an unfamiliar URL</strong> — before tapping any link in an unknown text, look at the full URL. Watch for lookalike domains and URL shorteners that obscure the destination.</li> <li><strong>A request for personal information</strong> — no legitimate organization requests your Social Security number, bank account number, password, or card details via an unsolicited text message.</li> <li><strong>Instruction to text back a different number</strong> — a technique for routing around carrier spam detection.</li> </ul> <p>One red flag is worth noting; two or more in combination constitutes a reliable pattern.</p> <h2>Step 4: Decide Your Response</h2> <p>Based on what the lookup showed and what the message contains, use the following decision framework:</p> <p><strong>If the lookup returned a recognizable business name AND the message content is consistent with that business:</strong> The text is likely legitimate. Engage through the expected channel — navigate to the company's known website yourself rather than tapping the link in the message.</p> <p><strong>If the lookup showed red flags (VoIP line, high spam report volume) OR the message contains the patterns above:</strong> Do not engage. Block the number directly from your messages app. Forward the message to 7726 (SPAM) to report it to your carrier. If the message impersonated a specific company or government agency, consider reporting to the FTC at reportfraud.ftc.gov.</p> <p><strong>If the message appears to be a benign wrong-number text:</strong> A brief, non-committal reply ("I think you have the wrong number") is low risk and resolves the situation.</p> <p><strong>If the message is a clear scam and you are certain of it:</strong> Block and report without engaging.</p> <h2>What to Do If You Already Replied</h2> <p><strong>If you replied only "who is this?" or similar:</strong> You have confirmed your number is active, which may result in more unsolicited messages. Block the number and monitor your inbox. There is no credential or financial risk from a text reply alone.</p> <p><strong>If you clicked a link in the message:</strong> Close the browser immediately if you have not already. Do not enter any information on the page. If the site requested device permissions (camera, location, contacts), review your phone's app permissions. Change the password for any account that uses your email address or phone number as a login identifier.</p> <p><strong>If you provided personal information:</strong> Consider the type of information you shared. If you provided financial information (card number, bank account), contact your bank or card issuer immediately. If you provided login credentials, change those passwords immediately across any account where you use the same password. Report the incident to the FTC at reportfraud.ftc.gov.</p> <h2>How to Stop Unknown Texts Going Forward</h2> <p><strong>Filter Unknown Senders on iPhone:</strong> Go to Settings &gt; Messages and enable "Filter Unknown Senders." Messages from numbers not in your contacts are sorted into a separate tab — not deleted — but do not generate notifications.</p> <p><strong>Enable spam protection on Android:</strong> In Google Messages, tap the three-dot menu, go to Settings &gt; Spam protection, and ensure "Enable spam protection" is on.</p> <p><strong>Forward spam to 7726 (SPAM):</strong> This shortcode is operated by all major U.S. carriers. Forwarding the spam message contributes to the industry database that carrier-level filtering tools use.</p> <p><strong>Use your carrier's spam filtering app:</strong> AT&amp;T ActiveArmor, T-Mobile Scam Shield, and Verizon Call Filter all offer a free tier that provides incoming message filtering alongside their call protection features.</p> <h2>Frequently Asked Questions</h2> <details class="mb-4 border-b pb-4"><summary class="font-semibold cursor-pointer">Is it dangerous to open a text from an unknown number?</summary><p class="mt-2 text-gray-600">Opening a text message and reading it does not expose your device to risk. The risk comes from tapping links within the message or calling back numbers included in the message. Modern messaging apps do not execute code when a message is opened — the danger is in the actions the message tries to prompt you to take, not in the act of reading the text itself.</p></details> <details class="mb-4 border-b pb-4"><summary class="font-semibold cursor-pointer">Should I call back an unknown number that texted me?</summary><p class="mt-2 text-gray-600">Generally, look up the number before calling back. Calling back an unknown number carries a different set of risks from replying by text — particularly the one-ring scam, where calling back a number that rang briefly connects you to a premium-rate line. Before calling back any number you do not recognize, run it through Who Sent That Text Message to check whether it is associated with a known business or flagged for scam activity.</p></details> <details class="mb-4 border-b pb-4"><summary class="font-semibold cursor-pointer">What happens if I click a link in a spam text?</summary><p class="mt-2 text-gray-600">If you clicked a link without entering any information, the immediate risk is limited to the site having logged your visit, device type, and IP address. The more significant risk materializes if the site displayed a form requesting information or prompted you to download something. If you entered any credentials or personal data on the page, treat those credentials as compromised and change those passwords immediately.</p></details> <details class="mb-4 border-b pb-4"><summary class="font-semibold cursor-pointer">How do I report spam texts?</summary><p class="mt-2 text-gray-600">Forward the message to 7726 (SPAM) — supported by all major U.S. carriers. You can also report to the FTC at reportfraud.ftc.gov and to the FCC at consumercomplaints.fcc.gov. For texts impersonating specific companies, those companies typically have their own fraud or phishing report intake.</p></details>