SMS · WHATSAPP · SMISHING
How to check a suspicious text: a guide to smishing and WhatsApp scams
A message arriving between tasks can make us act too quickly. Smishing, or SMS phishing, and WhatsApp scams exploit this availability to prompt a click, reply or payment. Here is a method for checking a suspicious text before acting.
1. Recognise SMS scam scenarios
These examples illustrate pretexts worth checking; they are not an exhaustive list.
The fake delivery
A message claims a Chronopost, DHL or La Poste parcel is stuck and asks for a fee. Check tracking in the carrier’s usual app or website without using the received link. A familiar brand in a message does not authenticate its sender.
The fine or administrative request
A supposed ANTAI fine, Ameli request or CPF offer creates artificial urgency. Check your official account directly to verify the request. Do not provide information based solely on the message.
The relative with a new number
“My phone broke; this is my new number” can precede a request for money. Call your relative on a known number or contact them through another channel. A familiar WhatsApp photo is not proof.
The fake bank warning
A message announces a suspicious transfer and asks you to call or sign in to stop it. Open your banking app yourself or use the bank’s official number. Do not disclose codes or approve transactions requested by an unverified caller.
2. Compare warning signs in a fraudulent message
The link and domain
A shortened link conceals its destination; a subtle spelling change can imitate a brand. An ending such as .ru, .cc, .com or .fr is not enough to judge trustworthiness. Compare the full domain with the known official address without opening the link to test it.
The displayed number or name
A French 06 or 07 mobile number used for an unusual request deserves checking but is not proof of fraud. Conversely, a brand name, short code or existing conversation does not guarantee the message’s origin.
Pressure and the request
Account suspension, immediate payment, a reward or a request for a code: pause the urgency. Ask a simple question: were you expecting this request? Even a perfectly written message can be deceptive.
3. Use an SMS and link checker
Do not click “just to see”. Copy the text into the suspicious SMS checker without activating the link, removing passwords, one-time codes and bank details. If you cannot copy without opening, ask for help rather than testing the destination.
SecurCheck examines manipulation tactics, requests for payments or codes and extracted links. Depending on available sources, it checks signals related to domains and redirects. You do not need to open the destination yourself on your phone.
A recent creation date, when available, is a signal to interpret in context; an old domain can also be compromised. The report does not guarantee complete checks or the absence of fraud. When unsure, confirm the request through a known channel.
4. What if you are unsure or have already clicked?
Do not continue a suspicious conversation
Do not reply or call the supplied number to check. Keep the message and contact the organisation or relative using details you already know.
Report the SMS
In France, forward the SMS to 33700 or use the official form at 33700.fr, then follow its instructions. For WhatsApp messages, use the app’s reporting and blocking functions. Preserve useful evidence before deleting a conversation.
Visit the official 33700 platformAlert the right people for what was exposed
If you entered payment details, contact your bank immediately through its official channel. For work credentials or a phone used for work, notify IT. They can assess compromise and revoke affected sessions.
Support safer mobile use across your teams
SMS and WhatsApp messages can reach employees outside the channels monitored by email and network protections. SecurCheck Business gives them a way to check suspicious texts before sharing information or authorising payments.
Taking time to check interrupts pressure tactics. This habit complements mobile protections and internal procedures without eliminating every risk.
Explore the offer for your employeesExplore our suspicious SMS checker