The smishing and scam waves flooding U.S. phones right now — with cited FTC, FBI and IRS numbers, our own red-flag findings, and quote-ready stats for reporters and newsletter editors.
By the Scam Detective threat desk · Last updated October 1, 2026
Journalists & editors: this page is free to cite and link. Questions or a comment for a story? [email protected]
“The tell is almost never the story in the text — it's the link. Real toll agencies, banks, and the IRS don't collect money or verify your identity through a link in an unexpected message. If a text creates panic and points you at a URL, treat the URL as the scam until you've checked it.”
Total reported U.S. fraud losses in 2025 — the highest on record and about a 25% jump over 2024.
Source: Federal Trade Commission (2025) ↗Reported losses to imposter scams in 2025 — the most-reported fraud for the fifth year running, with bank impersonators the single costliest.
Source: Federal Trade Commission (2025) ↗Losses to cyber-enabled crime reported to the FBI's Internet Crime Complaint Center (IC3) in 2025 across 1,008,597 complaints — up from 859,532 in 2024.
Source: FBI IC3 Internet Crime Report (2025) ↗Losses to government- and law-enforcement-impersonation scams (toll, DMV, IRS and badge calls) across nearly 61,000 IC3 complaints from Jan 2025 to Jul 2026.
Source: FBI IC3 Public Service Announcement (2025–26) ↗Cryptocurrency-related losses reported to the FBI in 2025 across 181,565 complaints — the engine behind 'wrong number' pig-butchering investment scams.
Source: FBI IC3 Internet Crime Report (2025) ↗What the IRS will ever ask for by text: it never initiates contact by text, email, or social media to request personal or financial information.
Source: Internal Revenue Service (Ongoing) ↗Cite this page: Scam Detective, “This Week in Scams,” updated October 1, 2026. https://scam-detective2.acoco.ai/scam-report — free to quote with attribution. Please link authority figures to their original sources, linked above.
Each wave below is an actively-circulating, authority-warned campaign. We track the domain patterns — we never link to a live scam site. Dates show when we last verified the wave as active.
toll / smishing text scam
A nationwide wave of fake “unpaid toll” texts is hitting phones right now. Here’s how to tell a real toll notice from the scam — and check the link in seconds.
Top red flag
A tiny “toll” amount like $6.99. A small, specific balance is designed to feel plausible and get you to pay fast without questioning it — the fee is a lure for your card details.
Spoofs: E-ZPass, FasTrak, SunPass and state toll authorities
Full alert & red flags →DMV / government-impersonation text scam
State DMVs and attorneys general are warning about fake texts threatening license or registration suspension over an “unpaid ticket.” Check the link before you click.
Top red flag
Threat to suspend your license or registration. “Your registration will be suspended today” is intimidation. Real suspensions follow mailed notices and due process, not a surprise text.
Spoofs: state DMVs, Secretaries of State and Motor Vehicle Commissions
Full alert & red flags →delivery / smishing text scam
Fake USPS “your package is on hold” and “we couldn’t verify your address” texts are everywhere right now. Here’s the tell — and a free way to check the link.
Top red flag
“Package on hold” or “address couldn’t be verified”. Vague delivery problems with a fix-it link are the classic hook — especially if you weren’t expecting a parcel.
Spoofs: USPS, UPS, FedEx and DHL
Full alert & red flags →bank / Zelle impersonation text scam
Fake “fraud alert” texts pretending to be your bank or Zelle are the single most-reported text scam. Here’s the tell — and a free way to check the link before you tap.
Top red flag
A “did you make this charge / Zelle payment?” text. An out-of-the-blue fraud alert asking you to reply YES/NO or tap a link is the hook. It manufactures panic so you act before thinking.
Spoofs: Chase, Wells Fargo, Bank of America, Zelle and local banks & credit unions
Full alert & red flags →IRS / government-impersonation text scam
Texts claiming you have an unclaimed IRS refund — or an overdue tax debt with an arrest threat — are circulating hard. The IRS never texts links. Check yours free.
Top red flag
An “unclaimed refund” you have to claim by link. The IRS doesn’t text you a link to release a refund. A surprise refund with a tap-here link is bait to harvest your identity.
Spoofs: the IRS and state tax authorities
Full alert & red flags →Amazon impersonation text scam
Fake Amazon texts about a locked account, a suspicious order or a Prime charge are surging — especially around big sale events. Here’s the tell, and a free link check.
Top red flag
“Your account is locked / on hold”. A surprise lock-out text with a fix-it link is the classic hook — it rushes you to a fake login before you think to check the app.
Spoofs: Amazon and Amazon Prime
Full alert & red flags →crypto-investment / “pig butchering” text scam
A stray “Hi, is this Jessica?” text is often the opening move of a crypto-investment (“pig butchering”) scam. Here’s how it works — and how to check any platform link free.
Top red flag
An “accidental” text from a stranger. A wrong-number message that keeps the conversation going after you say they’ve got the wrong person is a scripted opener, not a mistake.
Spoofs: Coinbase, Binance, Kraken, MetaMask and other exchanges & wallets
Full alert & red flags →job / task smishing text scam
Texts offering a flexible online “job” doing simple tasks — rating products, liking videos, boosting apps — are one of the fastest-growing scams. Here’s the tell, and a free link check.
Top red flag
An unsolicited “job offer” by text. A recruiter messaging you out of nowhere about easy remote work — with no application, interview or company you recognise — is the opening move, not a real opportunity.
Spoofs: Amazon, TikTok, Temu, recruiting agencies and well-known retailers & brands
Full alert & red flags →Patterns we see most in the links people paste into Scam Detective. These are our own observations from live scan traffic — not authority figures — and reporters are welcome to quote them as such.
Cheap, throwaway TLDs
Live scam links overwhelmingly hide on low-cost or unusual endings — .top, .vip, .xin, .cc, .icu, .win — instead of the .com or .gov of the brand they impersonate.
A real brand spliced in front
The most convincing links put a genuine-looking name at the front of a throwaway domain, e.g. 'chase.com-secure-alert.top' or 'irs.gov-refund.top' — the real brand is only the prefix, never the actual domain.
A tiny, specific dollar amount
Toll, delivery, and 'redelivery fee' texts lead with a small, plausible balance (often around $6.99). The fee is bait; the card and personal details entered on the next page are the real target.
Manufactured deadlines
'Pay within 12 hours or lose your registration / your package is returned / your account is frozen' is the single most common pressure line — it exists to stop the reader verifying with the real organisation.
Got one of these texts? Paste the link for an instant 0–100 scam risk score and a plain-English verdict. The full report with all 5 red flags is $4.99, one-time.
Free risk-score preview · full report with all 5 red flags for $4.99 · no subscription
Every wave above spoofs a real organisation. Our Brand Impersonation Audit finds the lookalike and typosquat domains copying your brand — each with evidence, a risk rating, and a ready-to-send takedown-request template.
The full researched report on who's impersonating your brand.
A deeper, wider investigation for brands with more to protect.
Free preview first · Audit $99 / Audit Pro $299 · delivered instantly · no subscription
Authority figures are drawn from primary sources — the FTC, the FBI's IC3, the IRS, and the FDIC — each linked to its origin. The live waves are cross-checked against those advisories before we publish, and our own findings come from patterns in the links people submit to Scam Detective. Scam Detectiveis a one-time scam-intelligence service; we don't recover funds, take sites down, or give legal advice.
More: all live scam alerts · all scam checks · brand impersonation audit.