How to Report Scam Texts on iPhone and Android

Scam texts, often referred to as smishing, are fraudulent text messages designed to trick you into clicking malicious links, downloading malware, or revealing sensitive personal details like passwords and bank account numbers. These messages frequently mimic trusted brands such as shipping couriers, government agencies, or financial institutions.

When you report a scam text, you do more than just clean up your inbox. Mobile carriers and security researchers use these reports to analyze fraudulent sender patterns, blacklist malicious URLs, and shut down active phone numbers used by cybercriminals. Every report contributes to a larger database that strengthens network-level defenses for millions of users worldwide.

If you use an Apple iPhone running iOS, reporting junk and scam messages is built directly into the default Messages app. When you receive a text from an unknown sender who is not saved in your contacts, Apple provides a convenient reporting option beneath the message bubble.

To report the message, open the conversation and tap the Report Junk link located directly under the text. A prompt will appear asking you to delete and report the message to Apple. Tap Delete and Report Junk to send the sender data and message content to Apple's security servers. If you do not see this option, you can still forward the message manually or block the number directly through your contact settings.

Android users utilizing the default Google Messages app have robust, automated spam protection features built right into the messaging interface. When a suspected scam text arrives, Google Messages typically quarantines it into a dedicated spam folder and prompts you to verify the threat.

To report a message manually, long-press the conversation thread in your inbox, tap the three-dot menu icon or the block symbol at the top of the screen, and select Report spam. You can choose whether to block the sender and contribute data about the spam message to help Google improve its automated detection algorithms for future security updates.

In the United States, the United Kingdom, Canada, and Australia, major mobile carriers participate in a centralized spam-reporting system accessible via the short code 7726 (which spells SPAM on a telephone keypad). Forwarding scam messages to this number alerts your specific carrier to fraudulent activity occurring on their network.

To use this method, long-press the scam text bubble and select the option to forward the message. Enter 7726 as the recipient and send the message. Your carrier will typically reply asking for the sender's phone number. Reply with the exact number that sent the text to complete the carrier investigation process successfully.

Beyond notifying your phone carrier and device manufacturer, severe financial scams or identity theft attempts should be reported to official government consumer protection agencies. In the United States, you can forward scam text details to the Federal Trade Commission or report them via official cybercrime reporting portals.

When filing an official report, take a clear screenshot of the text message, record the exact date and time it was received, and note any suspicious URLs included in the body of the message. Having this documentation ready helps investigators track down organized fraud rings and take down fraudulent websites hosting phishing login pages.

Reporting active threats is crucial, but proactive prevention keeps your device secure in the first place. Never click on shortened URLs or links sent via text message from unknown numbers, even if the message appears to come from a legitimate corporate entity or delivery service.

Enable built-in filtering options in your device settings. On iPhone, go to Settings > Messages and toggle on Filter Unknown Senders. On Android, open Google Messages, navigate to Settings > Spam protection, and ensure the protection toggle is fully enabled. Additionally, avoid posting your mobile phone number publicly on social media platforms or online classified directories where automated scraper bots can harvest it.