Reading Free SMS Messages Safely: Scams, Links and Codes
SMS messages in a free public inbox are open to everyone, and that includes scam texts aimed at whoever owns the number. Reading them does no harm. Clicking, replying or reusing what you find is where things go wrong.
These rules keep you out of trouble when you browse a shared number, and most of them protect you on your own phone too.
What smishing looks like
Smishing is phishing by text message: a text that tries to get you to click a link, call a number or hand over information. Public numbers get plenty of it. Common patterns include:
- A parcel is “on hold” until you pay a small fee or confirm your address.
- Your bank, streaming or shopping account is “locked” or shows “unusual activity.”
- A refund, prize or tax rebate is waiting if you fill in a form.
- A toll, fine or bill is overdue and has to be paid today.
- A friendly “Hi, is this you?” from a stranger, trying to start a conversation.
Most share the same ingredients: urgency, a link or number to contact, and a request for money or personal details.
Five rules for any public inbox
- Don't open links. A link may lead to a scam page, or it may be a real sign-in link for someone else's account. Neither is yours to open.
- Don't call numbers in messages. Scam texts often push you toward a phone line answered by the scammer.
- Don't reply. You can't reply from this site anyway, and on your own phone a reply tells the sender your number is active.
- Use only the code you requested. A code meant for someone else opens their account. Using it is wrong and may be illegal, whatever your reason.
- Leave other people's details alone. Names, order numbers or addresses in someone else's texts aren't yours to keep or use.
The “forward me the code” scam
This trick is used to take over accounts, often on messaging apps such as WhatsApp. It usually goes like this:
- The scammer starts signing in to an account with the victim's phone number, which makes the service text the victim a real verification code.
- Moments later, a message arrives from a friend's hacked account or a stranger: “Sorry, I sent my code to your number by mistake. Can you forward it?”
- If the victim shares the code, the scammer takes over the account and uses it to try the same trick on the victim's contacts.
The rule is simple: a verification code is only for the person who requested it. Real services don't ask you to pass codes to anyone, and a friend who really needs help can tell you so on a call. If an unexpected code reaches your own phone, someone may be trying to get into your account. Keep the code to yourself and consider changing your password. For why SMS codes are weaker protection than they look, see the security side of SMS verification.
Telling a real code text from a fake
| Sign | Real verification text | Fake “verification” text |
|---|---|---|
| Timing | Arrives right after someone asked for a code | Arrives out of the blue |
| Content | A short code, often with “don't share this code” | A link to “verify” or “confirm” the account |
| What it asks | Nothing beyond typing the code into the app or site | Reply, call, pay, or enter details on a web page |
| Tone | Plain and brief | Urgent, with threats of closure or loss |
| Sender | Matches the service, though the format varies by country | A random personal number or an odd spelling of a brand |
Scammers can fake sender names, so a familiar sender isn't proof on its own. Some genuine services also send links, so a link doesn't prove a scam either. On a public number, the safe move is the same in both cases: leave it alone. For what the different sender types mean, see reading senders and content in an online inbox.
Free numbers available now
Click a number to open its public inbox, enter the number on the signup form, then press Update Messages on the number's page to fetch the code.
Questions
Related guides
Virtual Phone number to receive sms messages online without using your real phone number
Blog
Services
Contact
All rights reserved.