Fall is a busy time of year. School is back in session, holiday shopping begins, and many of us spend more time online managing purchases, accounts, and everyday tasks.

Unfortunately, it's also a busy season for scammers.

The most common text message scams include fake package updates, bank fraud alerts, unpaid toll notices, account verification requests, gift card demands, and prize notifications. These messages are made to look urgent so you’ll click a link, provide information, or send money before checking whether the request is legitimate.

During Cybersecurity Awareness Month and throughout the year, it’s important to watch for suspicious messages. Fraudsters know people are expecting delivery updates, account alerts, and promotional offers, which can make scam texts easier to disguise as legitimate messages.

At American State Bank, we frequently hear from customers who receive texts that look completely real. The messages may appear to come from a bank, shipping company, or government agency. The good news is that many text scams use the same strategies. Once you know the warning signs, they’re much easier to spot and avoid.

What Is a Smishing Scam?

A smishing scam is a fraudulent text message designed to trick someone into clicking a link, sharing personal information, providing account credentials, or sending money. The word combines SMS, or text messaging, with phishing.

Simply put, it's a phishing attempt that arrives through a text message instead of an email.

These phishing text messages are designed to catch people off guard. The message often claims there's a problem that needs urgent attention, whether it's suspicious account activity, a missed package delivery, or a payment issue.

The goal is to get you to react before you've had a chance to think twice.

Common Text Message Scams Happening Right Now

Text message scams are constantly changing, but a handful of tactics continue to show up again and again.

Fake Package Delivery Texts

The package delivery text scam remains one of the most common examples.

You receive a text claiming a package is delayed, being held, or can't be delivered until you update your information.

Messages may look like:

  • "Your package is being held due to an address issue. Click here to update your information.”
  • "Final delivery attempt. Schedule redelivery now."

These scams work because almost everyone is expecting a delivery at some point. Even if you haven't ordered anything recently, the message can create just enough doubt to trick you.

If you receive one, open the shipping company’s official website or app yourself. Don’t use the link or phone number included in the message.

Fake Bank Fraud Alerts

Few things get someone's attention faster than a message about their money.

That's why bank text scams remain so common. A text might say:

  • "Did you authorize a purchase for $841.23? Reply YES or NO."
  • "Your debit card has been restricted due to suspicious activity. Verify your account now."

These messages are designed to create a sense of urgency and encourage you to act quickly.

Banks may send legitimate transaction or account alerts, but an unexpected message should still be verified. If you receive a text about your account and aren’t sure whether it’s real, contact your bank through a number or website you already trust rather than responding to the message.

Not Sure a Message Is Really From Us?

Don't reply to the text or use any phone number or link it includes. Instead, call one of our offices directly using the numbers below:

  • Osceola: 641-342-2175
  • Lamoni: 641-784-3120
  • Winterset: 515-462-5090

You can also contact our team through our website.

Keep in mind: Don't include account numbers, passwords, PINs, Social Security numbers, or other sensitive information in the contact form.

Unpaid Toll Scams

Even Iowans who rarely encounter toll roads have received these messages.

The text claims you owe a small toll balance and must pay immediately to avoid extra fees or penalties.

Examples include:

  • Outstanding toll balance detected. Payment required today."
  • Avoid collection action. Pay your toll balance now."

The amount is usually small enough that some people consider paying before verifying whether the charge is real. Instead, visit the toll authority’s official website by typing the address into your browser yourself.

Account Verification Scams

These texts often pretend to come from companies you use regularly.

The message may warn that your account is about to be suspended unless you verify your information.

For example:

  • "Your account requires verification within 24 hours."
  • "Your profile has been locked. Confirm your login information now."

The link may lead to a fake website designed to look nearly identical to the real one. If you enter your username and password, that information may be sent directly to the scammer.

Gift Card Scams

One of the clearest warning signs of fraud is a request for payment using gift cards.

A text might say:

  • "Purchase gift cards and send the redemption codes to complete payment."
  • "Gift card verification is required before processing."

Real businesses and government agencies will not unexpectedly demand payment through gift cards. Never give someone the numbers or PINs from the back of a gift card.

Prize or Giveaway Scams

Who wouldn’t enjoy seeing a message that says they won something? Scammers take advantage of that excitement.

You may see messages like:

  • "Congratulations! You've been selected to receive a $1,000 reward."
  • "Claim your exclusive customer gift before it expires."

If you didn’t enter a contest or sign up for a promotion, be cautious. A legitimate prize should not require you to provide financial information or pay a fee before receiving it.

Warning Signs a Text Is a Scam

Wondering how to spot a text scam? Most fake text messages have at least one of these red flags.

Quick Scam Text Checklist

  • The message comes from an unfamiliar phone number.
  • You’re being pressured to act immediately.
  • The text asks for passwords, PINs, account numbers, or verification codes.
  • It contains a suspicious or shortened link.
  • You’re told your account will be locked or closed unless you act now.
  • The sender asks for payment through gift cards.
  • The text promises free money, prizes, or rewards.
  • You’re asked to verify personal or financial information.
  • The message doesn’t match activity you recognize.
  • Something simply feels off.

Spelling and grammar mistakes can be warning signs, but don’t rely on them alone. Scam messages can also be polished, personalized, and nearly identical to legitimate alerts.

If a message makes you hesitate, trust that feeling. Verify it before clicking, replying, or sharing information.

What Should You Do if You Receive a Scam Text?

Don't Click Links

Even if the message looks legitimate, avoid clicking links until you've independently verified who sent it.

Don't Respond

Responding may confirm that the sender reached an active number. If the message is clearly suspicious, don’t respond, even if it tells you to reply “STOP.”

Block the Sender

Use your phone’s available blocking and spam-reporting tools to help reduce future unwanted messages.

Report the Message

You can report the message through your phone or mobile carrier. You can also forward suspicious text messages to 7726, which spells SPAM, and report fraud at ReportFraud.ftc.gov.

Contact Your Bank If You're Concerned

If the message references account activity, debit cards, online banking, or suspicious transactions, contact your bank directly using trusted contact information.

What If You Already Clicked the Link?

First, don't panic. Many people realize a message is suspicious only after they've clicked. Acting quickly can help reduce possible damage.

Stop Entering Information

If the page is asking for a password, account number, Social Security number, debit card details, or verification code, close it without entering anything else.

Change Passwords Immediately

If you entered login credentials, change those passwords right away. If you use the same password on other accounts, update those accounts as well. Use a unique password for each important account.

Review Your Accounts

Check your checking account, savings account, credit cards, and other financial accounts for activity you don’t recognize.

With American State Bank’s mobile banking and online banking, customers can review transactions and set up account alerts. Available alerts include balance, transaction, and transfer notifications.

Contact Your Bank

If you entered banking information or notice suspicious activity, contact us as soon as possible. The earlier we know there may be a problem, the sooner we can discuss the appropriate next steps with you.

Report Potential Fraud

Report fraud to the company being impersonated and at ReportFraud.ftc.gov. If money was taken or your identity may have been compromised, you may need to take additional identity-theft precautions.

Continue Monitoring Your Information

Watch your account statements, account alerts, and credit activity in the weeks ahead. One suspicious event may be followed by additional calls, emails, or text messages.

How We Help Protect Our Customers

Protecting our customers' financial information is a top priority at American State Bank.

We help customers stay informed about the latest scams and provide tools to support safe, secure banking. Depending on your accounts and services, those tools may include account alerts, mobile and online banking, transaction monitoring, debit card management, mobile check deposit, and the Brella app, which provides debit card controls and purchase alerts.

Just as important, you’ll always have access to local bankers who are here to help. Our team regularly answers questions about suspicious emails, phone calls, and text messages.

If something doesn’t seem right, call your local office:

  • Osceola: 641-342-2175
  • Lamoni: 641-784-3120
  • Winterset: 515-462-5090

We’d rather help you verify a message than have you worry about whether it’s legitimate.

Contact American State Bank

Frequently Asked Questions

What are the most common text scams right now?

Common text message scams include fake package delivery updates, bank fraud alerts, unpaid toll notices, account verification requests, gift card scams, and fake prize notifications. Most create urgency and ask the recipient to click a link, reply, provide personal information, or send money.

Can banks send legitimate text messages?

Yes. Banks may send legitimate messages related to account activity, transaction alerts, fraud monitoring, or account notifications. However, you should be cautious if an unexpected message asks for passwords, PINs, account numbers, or verification codes. Contact the bank through a trusted phone number if you’re unsure.

How do I report a scam text?

Don’t click the link or respond to the sender. Use your phone’s block and report features, forward the message to 7726, and report fraud at ReportFraud.ftc.gov If the message impersonates your bank or references your account, contact your bank directly.

What happens if I click a scam link?

A scam link may lead to a fake website designed to steal login information or personal data. Some links may also expose a device to harmful software. If you click one, close the page, change any passwords you entered, review your accounts, contact your bank if financial information was involved, and continue monitoring for suspicious activity.

Can scammers steal money through text messages?

Yes. Fraud text messages can be used to trick people into sharing personal information, revealing login credentials, approving transactions, or sending money.

Should I reply STOP to scam texts?

Don’t reply to a message that is clearly fraudulent or comes from an unknown sender. Responding may confirm that your number is active. The “STOP” option is intended for legitimate businesses whose messages you previously agreed to receive.

How can I protect myself from future scams?

Be cautious with unexpected texts, avoid suspicious links, enable account alerts, use strong passwords, and verify requests through trusted sources before taking action.