Phishing texts and emails: fake bank, delivery, toll, and "account locked" messages

“Your package could not be delivered. Confirm your address here.” “Unpaid toll: pay $4.15 now to avoid a penalty.” “Unusual login on your account. Verify now or your card will be blocked.”

Messages like these arrive on millions of phones every day. Most are fake. They are called phishing, because the scammer is fishing for your password, your card number, or the code that unlocks your account.

How it works

The message copies the look of a real company: a bank, a delivery service, a toll agency, a streaming app, or a government office. It creates a small emergency and gives you a link to solve it.

The link goes to a website that looks like the real one. When you type your login, the scammer gets it. Sometimes the page asks for the one-time code your bank just texted you. That code is the last lock on your account. If you give it away, they are in.

Some phishing is more personal. A message may use your name, or seem to come from a boss or a relative asking you to “handle something quick.” The goal is the same: get you to act before you check.

Checking is easier than it sounds. Real companies do not send links to fix account problems. If your bank has an issue, it will show in the app when you open it yourself. Delivery services do not text about held packages unless you gave them your number for that order, and toll agencies send bills by mail. If a message worries you, ignore the link, open the company’s app or type its address, and look for the problem there. If it is not there, the message was a scam.

One more habit protects you more than any other: never share a one-time code with anyone. Not a caller, not a text, not someone who says they are from the fraud department. Real banks will never ask for it.

Why it targets families like yours

Phishing is not aimed at one community. It goes to everyone, in every language. But families juggling work, school, and relatives in two countries get a lot of real messages about packages, payments, and accounts, and it is normal to react quickly. Scammers rely on that busy moment. Slowing down for ten seconds is the whole defense.

The simple rule

Do not tap the link in the message. Go to the app or website yourself, and never give anyone a code.

If you did tap and enter something, do not feel embarrassed. Change the password, call your bank using the number on your card, and report it. Acting fast usually limits the damage.