Spotting a scam text in under a minute

Scam messages are not badly written any more. They are well spelled, correctly formatted and often use a real company's name and branding. What gives them away is not language — it is structure.

Urgency you did not create

Almost every scam message imposes a deadline: your account will be closed today, the delivery will be returned this afternoon, the payment must be confirmed within the hour. Genuine organisations do occasionally need a quick response, but they rarely make the deadline the entire point of the message.

A link that does not match the sender

Look at what comes immediately before the first single slash in the address. That is the real domain. Everything before it can be made to say anything at all, including the name of your bank.

A request for something no organisation should ask for

• A one-time passcode or security code — never share one with anyone, for any reason.
• Your full PIN or password.
• A transfer to a “safe account”. There is no such thing.
• Remote access to your computer or phone.

A channel that came out of nowhere

A text about a bank you do not bank with, a delivery you did not order, or a refund you did not request is worth nothing more than deletion. If there is any chance it is genuine, contact the organisation using a number you already have — from a card, a statement or their website typed in by hand.

Asking is the sensible response, not an embarrassing one

The single most effective thing a family can do is make it normal to ask. Scams work on isolation and hurry. A household where “does this look right to you?” is an ordinary question is a much harder target than one where nearly being caught feels like something to hide.