Back to Tech TipsSafety

The 5-Second Test: How to Spot a Fake Text Before You Tap

June 2026·3 min read

Fake delivery texts, fake bank alerts, fake Amazon warnings — they all share the same shape. One five-second check defuses every version.

The most common scam in existence right now is a text message. You have probably already gotten several this week — a "USPS" delivery problem, a "Chase" fraud alert, an "Amazon" account warning. They look real. They feel urgent. And they all share the same shape.

Here is a five-second test that handles every version, including the ones the scammers invent next month.

The 5-Second Test

Before you tap any link or call any number in a text message, ask one question: "Would I rather verify this through the real app or website I already use?" If the answer is anything other than a confident yes — do not tap.

  • For a delivery text — open USPS.com, UPS.com, or the store app you ordered from. Look up the tracking number you got when you placed the order.
  • For a bank or card text — turn over your card. Call the number printed on the back.
  • For an Amazon, Apple, Netflix, or other account warning — open the real app on your phone. Sign in there. Check your orders or account screen.
💡

Real companies never put callback numbers or login links in text alerts. The presence of either is the scam itself.

Why the Small Fee Is the Bait

Many of these texts ask for a small payment — $1.99 redelivery fee, $3 customs charge. The small amount is deliberate. It is designed to make you let your guard down — "what is the harm of $1.99?" The harm is that the page you land on captures your full card number, and the real money comes off your account later.

The amount is bait. The card capture is the trap.

What to Do With the Text

  • Delete it. Do not reply, do not tap the link, do not call the number.
  • On iPhone, you can long-press the message and choose Block this Caller, or report by forwarding the text to 7726 (SPAM).
  • On Android, long-press the conversation and choose Block & report spam.
  • If you accidentally tapped a link and entered information, treat it like a real card breach: call your bank using the number on your card, freeze the card, change your online banking password from a different device.

The Universal Rule

Three words, said until they are reflex: pause, verify, decide. Pause before any urgent action. Verify through a channel you already trust. Decide with a clear head. This rule works on every modern scam type, not just text messages.

TTL teaches the full pattern in the Stay Safe track of the ADAPT app — 10 levels covering phishing texts, phishing emails, fake websites, impostor calls, romance scams, and more. The five-second test in this article is one piece of a much larger toolkit.

Want to Practice This in Person?

Join a TTL workshop — small groups, patient instructors, and your own device. In-person in Albany or online via Zoom.

Reserve Your Spot →