What Happens If You Reply to a Scam Text?

What happens if you reply to a scam text? You confirm what the sender was fishing for: your number works, and a real person reads and answers it. The reply alone won't hack your phone or drain your bank account, but it marks you as worth more effort, so expect more texts, a follow-up call, or a friendlier second message built on whatever you wrote. Replying STOP helps only with legitimate senders, such as a business you signed up with that texts from a vetted short code; those senders are expected to honor opt-outs. Sent to a random scam number, STOP changes nothing except confirming you're there. This guide covers what a reply reveals, when STOP or YES is safe, how replying differs from tapping a link, and what to do if you already replied.

What Really Happens If You Reply to a Scam Text

Most scam texts go out in bulk to numbers the sender knows very little about. Some come from leaked databases or scraped listings; others may simply be generated in sequence. Reaching phones is the easy part. The hard part, from the scammer's side, is working out which numbers belong to people who read their texts and respond. A reply answers that question for them.

Even a one-word reply tells the sender four things:

• The number works. Bulk texting systems can often tell whether a message was delivered, so this part may not be news.
• A person reads it. This is the valuable part. A delivery report can't show whether anyone looks at the screen; a reply can.
• Unexpected messages get a reaction out of you. "Who is this?", "STOP", and a string of insults all prove the same thing: a stranger's text moved you to act.
• Whatever you typed. "This isn't Sarah, it's Dana" hands over a first name. "I don't even bank there" tells them to try a different bank. A worried reply signals that urgency works on you.

That last point is easy to underestimate. Every detail you volunteer becomes material for the next message, which is why the second text in a scam conversation often feels more personal, and more believable, than the first.

What a reply can't do on its own

A plain text reply doesn't install anything on your phone, doesn't give anyone access to your accounts, and doesn't reveal your location beyond what your area code already suggests. The damage in a text scam happens at a later step, when someone taps a link, calls a number, reads out a code, or sends money. The FTC's guide to spam text messages spells out what scammers are after: personal information such as your password, account number, or Social Security number. With it, the FTC says, they could get into your email, bank, or other accounts, or sell the information to other scammers.

So a reply is less like opening the door and more like answering a knock. Nobody got in, but now they know someone is home, and they may come back with a better story. One small practical cost: if the text came from an overseas number, your reply may be billed as an international message, depending on your plan.

What usually happens next

After one reply, the realistic outcomes range from nothing at all to a sustained effort:

1. Nothing. Big campaigns send far more messages than anyone could personally read replies to, and a lone STOP may never be seen by a human.
2. More spam. The same sender texts again, or new numbers start sending similar messages.
3. A tailored follow-up. A "wrong number" apologizes and keeps chatting, a fake bank says a specialist will call, or a fake recruiter sends "next steps."
4. A phone call. This is most likely after you answer a fake fraud alert, because a live call lets the scammer apply pressure in real time.

If all you sent was a single word, the realistic worst case is more junk and more convincing attempts, not a compromised phone.

The number that texted you may not be the scammer's

Two features of the messaging system make scam numbers a dead end. First, a sender can make a text display an originating number that isn't assigned to them. The wireless industry's CTIA Messaging Principles and Best Practices calls this message number spoofing and says it should be avoided. If the number was spoofed, your reply may land with someone who has nothing to do with the scam.

Second, the same guidelines describe "snowshoe messaging," spreading messages across many sending numbers or short codes, as something senders shouldn't do and service providers should work to prevent. Campaigns that spread out this way are why a reply to one number can be answered by another, and why blocking a single number rarely ends anything.

Read receipts can signal you too

On standard SMS, opening a text sends nothing back to the sender. Chat-style messaging works differently: if a message arrived through iMessage or RCS chat and you have read receipts turned on, the sender can see that you read it, no reply required. On iPhone, the Send Read Receipts switch is in the Messages settings; in Google Messages, it sits in the RCS chats (or chat features) settings. Menu names shift between versions, so treat these as approximate as of September 2026.

Why Scammers Want You to Reply

Sending texts in bulk is cheap. A human conversation or a phone call costs the scammer time, and time is the scarce resource. Replies show them where to spend it. That's why so many scam texts are written to provoke an answer rather than a click: they ask a question, make an accusation, or seem to reach you by mistake.

The money behind that effort is substantial. According to the FTC's data on text message scams, consumers reported losing $470 million in 2024 to scams that started with a text, five times the amount reported in 2020, even though the number of reports declined. The FTC's list of the most frequently reported text scams includes fake package delivery problems, bogus job offers, fake fraud alerts, fake unpaid-toll notices, and "wrong number" messages.

Scam formats built around your reply

Several of those formats only work if you answer:

• "Wrong number" openers. The FTC describes these as messages that seem misdirected and often evolve into conversations with romantic undertones that can lead to investment and other scams. Your polite "sorry, wrong number" is the entire point of the first message.
• Fake fraud alerts. "Did you make this purchase? Reply YES or NO." Either answer moves you to the next step, which is usually a phone call.
• Delivery and toll notices that ask for a reply. Some instruct you to reply Y and then reopen the message to "activate" the link. Some messaging apps, iMessage among them in some cases, keep links from unknown senders inactive until you reply or save the sender as a contact. The reply is what switches the trap on.
• Job offers. "Reply YES to learn more about this remote role." The reply starts a recruiting script, covered in the YES section below.
• Blank probes. "Hi," "Is this still your number?" or "Are you free?" contain no scam at all. They exist to see who answers.

Example scam text: wrong-number opener

+1 (202) 555-0142

Text Message

Hi Jenny, it's Mark from the wine tasting. Are we still on for dinner Thursday?

Sorry, wrong number.

Oh no, how embarrassing! Thank you for telling me. You seem really kind. Where are you based?

If you want a field guide to the scam types themselves, including bank impersonation, marketplace fraud, and recruitment texts, our guide on how to protect yourself from SMS scams covers each one. This article stays focused on a narrower decision: whether to answer, and what to do if you did.

Should You Reply STOP to a Scam Text?

Not to a scam text. STOP works because legitimate senders follow opt-out rules; scammers don't, so to them STOP is simply another reply. The useful skill is telling the two situations apart, and that starts with understanding why STOP works at all.

Why STOP works with legitimate senders

Businesses are supposed to have your permission before they text you. According to the FCC's guide to unwanted robocalls and texts, FCC rules ban autodialed texts to a mobile phone unless the owner consented beforehand or the message is for emergency purposes, and commercial texts require written consent. The FCC also says you may opt out of any robocall or robotext at any time and in any reasonable manner, even if you agreed to receive them earlier.

The wireless industry's messaging guidelines describe how that should look in practice. Under CTIA's Messaging Principles and Best Practices, business senders are expected to:

• get your consent before texting you, and your express written consent before sending marketing;
• use standard STOP wording in opt-out instructions, while also acting on plain requests such as "end," "cancel," "unsubscribe," "quit," or "please opt me out";
• treat an opt-out as valid regardless of capitalization or punctuation, so "stop," "Stop." and "STOP" all count;
• send one final message confirming you've opted out, then nothing more from that campaign;
• keep records of opt-outs so future messages aren't attempted.

CTIA is explicit that these are voluntary best practices, not law. Short codes, though, come with extra accountability. Those five- and six-digit numbers, used for things like flight delays, bank account alerts, shipping notices, and school delays, are assigned through a cross-carrier registry. Their senders are expected to follow the wireless providers' terms of use, and CTIA describes carriers as vetting short code programs up front and auditing them afterward. That's why STOP sent to a real short code you signed up with is usually uneventful: one confirmation, then silence.

Example: legitimate opt-out from a short code

72400

Text Message

Pharmacy alert: Your prescription is ready for pickup. Reply STOP to opt out, HELP for help.

STOP

You are unsubscribed from pharmacy alerts and will receive no further messages.

Two details are worth knowing. The confirmation applies per campaign, so a store that sends both order updates and promotions may treat them as separate programs, each needing its own STOP. And you don't have to text at all: CTIA says senders should support opting out by phone call or email as well, and the FCC's "any reasonable manner" standard points the same way. This is general information about US rules, not legal advice; other countries handle opt-outs differently, and some states add rules of their own.

Why STOP backfires with scam numbers

A scammer texting from a random number has already skipped every step above: no consent, no registered program, no audited short code. There's no reason to expect an opt-out to be honored, and every reason for the scammer to value your response. STOP tells them what any reply would: this number reaches a person who reads texts and reacts.

Some scam texts even end with "Reply STOP to opt out," copied from legitimate marketing because it makes a message look official. That line proves nothing. What matters is whether you recognize the sender and remember agreeing to hear from them. One useful check: legitimate recurring programs are expected to send a confirmation when you join, naming the program, how often it texts, and how to opt out. If you can't find anything like that in your messages and can't remember signing up, treat the sender as unknown.

How to tell which kind of sender texted you

Political texts sit in a gray zone. Under FCC rules, autodialed political texts need your consent, but manually sent ones don't. Campaigns count as business-type senders under CTIA's guidelines, so they're expected to honor opt-outs, and STOP to a campaign you recognize is reasonable. A "campaign" text pushing an urgent donation link is a different animal; if you want to give, do it through the organization's own website.

If a legitimate sender keeps texting after you've opted out, forward the messages to 7726 and consider filing a complaint with the FCC, both covered below.

What If You Replied YES to a Scam Text?

Scam texts ask for YES, NO, Y, 1, or CONFIRM because a one-key answer is easy to give on autopilot. The exact word matters less than the fact that you answered, and what matters most is the script your answer unlocks.

The fake fraud alert script

Example scam text: fake fraud alert

+1 (202) 555-0187

Text Message

BANK ALERT: Did you attempt a purchase of $1,249.99 at an electronics store? Reply YES to approve or NO to decline.

NO

Thank you. A fraud specialist will call you shortly to secure your account. Please keep your phone nearby.

The FTC's 2024 text scam data lists fake "fraud alert" texts, warning about a suspicious purchase or a problem with your bank, among the text scams reported most often. Notice that neither answer is safe. YES "approves" a purchase that never existed and invites a panicked follow-up. NO, the natural response to a charge you didn't make, is exactly what sets up the next step: a call from someone claiming to be your bank's fraud department.

The caller may sound polished and may already know your name, along with the fake transaction details from the text. The usual goal is to get you to "verify your identity" by reading back a code sent to your phone (really a login or payment code), to confirm your card number or PIN, or to move money to a "safe account" while they "investigate."

The FCC's advice for this moment is direct: never share account numbers, Social Security numbers, passwords, PINs, or other important information over the phone. If someone says they're calling from a company, hang up and call back using an official number from your account statement or the company's website. And if a caller asks you to pay with gift cards, it's a scam.

Can a YES reply sign you up for charges?

It's a common worry, and the short answer is that a text to an unknown number is not how banks authorize payments. A YES doesn't hand anyone your card or account. Money moves only when you take a further step: typing card details into a website, reading out a code, approving a payment in your banking app, or sending funds yourself.

If you're still uneasy, check your next phone bill for charges you don't recognize and ask your carrier whether third-party charges can be blocked on your line. That covers the unusual case of a subscription-style charge billed through your phone account.

YES to a job offer

Answering YES to an unexpected job text usually leads to a friendly "recruiter," a request to move to a chat app, and an onboarding process with a catch. The FTC's 2024 data describes task scams that promise online work completing a series of tasks and end with requests for people to invest their own money. If you replied, stop before you install anything, share ID documents, or pay any fee, and verify the company through its own website and official hiring pages.

Replying vs Clicking a Link: Which Is Worse?

Tapping the link is worse in almost every case. A reply sends a message to a phone number. A tap connects your phone to a web server the scammer controls, and that server decides what you see next.

According to the FTC, some links in scam texts lead to spoofed websites that look real but aren't; if you log in, scammers might steal your username and password. Other messages might install harmful malware that steals personal or financial information without you realizing it.

Even if you type nothing, a tap can reveal more than a reply. The site can see your device and browser type, your IP address (which suggests a rough location), and the fact that you tapped. Scam links can also carry a unique code for each recipient, which would tie your tap to your number and mark you as someone who clicks.

If you tapped but didn't enter anything

Close the page and don't go back. If it pushed you to download an app, install a "security update," or add a configuration profile, don't. If something did get installed, remove it: on iPhone, profiles appear under Settings > General > VPN & Device Management; on Android, uninstall any app you don't recognize from the Apps section of Settings. Then update your phone's operating system. Attacks that compromise a phone just by loading a web page do exist, but they're rare and usually aimed at specific high-value targets, and an up-to-date phone is your best defense against them.

If you entered information

Assume whatever you typed is compromised. Change that password right away, starting with the account you logged into and then any other account that uses the same password. Turn on two-factor authentication, ideally through an authenticator app rather than text codes. If you entered card details, call the number on the back of the card. Our digital privacy tips for beginners walk through password managers and two-factor setup if you need a starting point.

Is It Ever Safe to Respond to a Spam Text?

Yes, in a few situations. In most of them, though, the safe response goes somewhere other than the text thread.

You recognize the sender and signed up. Reply STOP to leave a legitimate program, as described above.

The message might be real. Perhaps your bank really did flag a charge, or a package really is delayed. The FTC's guidance is to contact the company using a phone number or website you know is real, not the information in the text, and it notes that legitimate companies won't ask for information about your account by text. Open the bank's app yourself, call the number on your card, or type the shipper's address into your browser.

A "friend" texts from a new number. Before you answer anything involving money, codes, or favors, verify through a channel you already trust: call the number you have saved for them, or message them on another app. Anyone can claim to be your cousin with a new phone.

Someone texts about your listing. If you posted something for sale or rent, a stranger's text may be genuine. Answer questions about the item, but keep payment on the platform and never read back a code sent to your phone. A "buyer" who asks for a code "to make sure you're real" is usually trying to verify an account of their own with your number. Our guide to avoiding scams when selling online covers the full seller playbook, and it's the situation where a masked number helps most (more on that below).

It's a genuine wrong number. You don't owe anyone a reply. If a real person texted the wrong number, they'll figure it out when you don't respond. Since the FTC counts wrong-number openers among the most frequently reported text scams, silence costs you nothing and protects you from the one that isn't innocent.

Why scam-baiting isn't worth it

Stringing a scammer along or firing back insults can feel satisfying. It also confirms your number, invites more messages, and keeps you in conversation with someone whose job is manipulation. People who bait scammers can end up revealing more than they meant to, or find themselves targeted from new numbers once the scammer catches on. Threats sent in anger can also create legal trouble of their own. A thirty-second report does more good.

What to Do If You Already Replied

Keep it in proportion first. One reply is not a breach, and what you do over the next few minutes and days matters far more than the reply itself.

Then match your next steps to what you actually sent:

What you sent	What it gave away	What to do now
STOP, "who is this?", or an insult	A person reads texts on your number	Block, report, and expect extra spam for a while
"Wrong number" or another polite reply	The same, plus that you're friendly	Don't continue the conversation, however pleasant it gets
YES or NO to a "fraud alert"	That you act on bank warnings	Expect a call; verify only through your bank's official number
Your name, email, address, or employer	Details for more convincing scams	Treat personalized messages with extra suspicion
A verification code	Possibly access to one of your accounts	Secure that account immediately (steps below)
A password, card number, bank login, or Social Security number	Direct access or identity details	Contact the bank or company through official channels now
Money, gift cards, or crypto	Your funds	Call your bank or payment provider right away and report it

If you sent a verification code

A code you didn't request means someone was trying to sign in to, reset, or set up an account using your phone number. Sending it to them may have given them that account. Move fast:

1. Open the service's official app or website yourself and change your password.
2. Sign out all other sessions or devices, if the service offers that option.
3. Check the recovery email, recovery phone number, and, for email accounts, any forwarding rules. Remove anything you didn't add.
4. Turn on two-factor authentication with an authenticator app.
5. If the code came from your bank, call the bank using the number on your card. If it came from your mobile carrier, call the carrier and ask about locking your number against transfers and SIM changes.

If you shared personal or financial details

Passwords, account numbers, and Social Security numbers are exactly what the FTC says text scammers are after, so act as though whatever you shared is already in use. Call your bank or card issuer using the number on your card, change the passwords for affected accounts, and watch your statements closely. If you shared your Social Security number, consider a credit freeze with the credit bureaus so no one can open new credit in your name. Then expect the next scam to use what you shared. A message that knows your address or employer isn't more trustworthy, just better informed.

If you sent money or gift cards

Contact your bank, card issuer, or payment app immediately and ask whether the payment can be stopped or reversed; speed matters. For gift cards, contact the company that issued the card, which may be able to freeze unspent funds. Report the scam to the FTC at ReportFraud.ftc.gov. And be wary of anyone who contacts you afterward offering to recover your money for a fee, a common second scam aimed at people who were just scammed.

If a "wrong number" has turned into a friendship

If you've been chatting for days or weeks with someone who first texted by mistake, look at where the conversation is heading, because this is the on-ramp to the romance and investment pitches described earlier. Warning signs include pressure to move to another messaging app, talk of a relative or mentor with a can't-miss trading strategy, screenshots of big returns, and a suggestion that you start with a small deposit. End the conversation, send nothing, and report the number.

Two more situations come up often. If the reply came from a work phone, tell your IT or security team, since a responsive company number can attract targeted attempts against your employer. If a parent or teenager replied, walk them through the same steps without blame, so embarrassment doesn't stop them from reporting the next one.

How to Report and Block a Scam Text on iPhone and Android

Reporting still helps after you've replied. According to the FTC, forwarding a spam text to 7726 (SPAM) helps your wireless provider spot and block similar messages in the future. The FCC notes that most mobile carriers support 7726 and suggests checking with yours, and CTIA's guidelines name 7726 reporting as the kind of complaint system providers may maintain.

Forward the text to 7726

On iPhone, touch and hold the message bubble, tap More, tap the forward arrow, enter 7726 as the recipient, and send. In Google Messages on Android, touch and hold the message, open the three-dot menu, choose Forward, start a new conversation with 7726, and send. Menu wording varies by version.

Your carrier may text back asking which number sent the message; answering is safe, because you're writing to your carrier's reporting line. 7726 is the reporting code in the US and some other countries, so check with your carrier if you're elsewhere. If the scam arrived as an iMessage or RCS chat rather than a regular SMS, the messaging app's own report option is the more direct route.

Report junk and block on iPhone

In the conversation, look for Report Junk below a message from an unknown sender, then tap Delete and Report Junk. This deletes the message and sends it for review: to Apple for iMessages and, where your carrier supports it, to the carrier for SMS. To block the sender, tap the number at the top of the conversation and choose Block Caller; on some versions you tap Info first, then Block this Caller.

To keep future texts from strangers out of your main list, turn on unknown-sender filtering. As of September 2026, look in Settings > Apps > Messages (Settings > Messages on older versions). Apple has used the names Filter Unknown Senders and Screen Unknown Senders for this option in different releases.

Report spam and block on Android

In Google Messages, touch and hold the conversation, tap Block, make sure Report spam is checked, and tap OK. To have suspected spam filtered automatically, open Messages settings and turn on Spam protection; recent versions group it under Protection & safety. Samsung Messages has its own Block number and Report spam options in the conversation's three-dot menu, with wording that varies by version. The FTC's text scam report specifically recommends reporting through Apple's Messages app or Google Messages in addition to 7726.

Report to the FTC and FCC

You can also report scam texts to the FTC at ReportFraud.ftc.gov. The FCC accepts complaints about illegal texts through its consumer complaint center under the unwanted calls category. Be realistic about what happens next: the FCC says it doesn't resolve individual complaints but uses them to guide policy and possible enforcement, and may share them with other agencies. File for the record, not for a personal fix.

How to Get Fewer Scam Texts After Replying

A reply can't be taken back, and a number that answered once may stay on scammers' lists. The goal from here is to filter what reaches you and to stop your number from landing in new places.

Layer your filters

The FTC describes three layers: your phone's option to filter and block spam or messages from unknown senders, tools or services from your wireless provider, and call-blocking apps that also block unwanted texts. The same FTC page points to the wireless industry's site, ctia.org, for a rundown of carrier and app options. No layer catches everything, but together they cut down on what lands in the list you check every day.

Don't rely on the Do Not Call Registry

The National Do Not Call Registry is free and worth joining, but the FCC describes it as a list that legitimate telemarketers agree not to call, and scammers aren't legitimate telemarketers. The FCC's rules on autodialed texts also apply whether or not your number is registered, so the registry isn't what protects you from robotexts either.

Stop spreading your number

Every place your number appears is another route onto a scam list. The FCC's tips include being careful about giving out your mobile number, reading privacy policies and looking for opt-out checkboxes before you submit your number on websites, and checking whether companies you do business with sell or share your information. Our guides to the privacy mistakes that put your phone number at risk and the signs you should stop sharing your number go deeper on where numbers leak.

Use a masked number with strangers

The most repeatable fix is not handing your real number to people you don't know yet: marketplace buyers, dating matches, contractors, one-time contacts. Ghost sends SMS with your real number masked, so the recipient sees a protected sender ID instead of your number, and Reply Links let them answer without ever seeing it; the two-way texting guide shows the setup. If a conversation with a stranger turns out to be a scam, your real number was never part of it. As of September 2026, Ghost delivers to 100+ countries on pay-as-you-go credits that never expire, with no subscription (pricing details).

Be clear about the limits. Ghost is built for sending messages: it doesn't filter texts that arrive on your real number, can't remove your number from lists it's already on, and isn't meant for receiving verification codes. Masking hides your number from the people you text, not from Ghost, carriers, or lawful legal process, as the privacy summary explains. For what already reaches your phone, the filtering and reporting tools above are the right answer.

Changing your number is a last resort

If the volume becomes unmanageable, a new number resets your exposure, but it's disruptive: you'll need to update banks, two-factor settings, and every contact who matters. For most people who replied to one scam text, filtering and reporting are enough.

Frequently Asked Questions

Sources

For how we select and review sources, see our editorial standards.

• FTC: How To Recognize and Report Spam Text Messages
• FTC: New FTC Data Show Top Text Message Scams of 2024; Losses Hit $470 Million
• FCC: Stop Unwanted Robocalls and Texts
• CTIA: Messaging Principles and Best Practices