6 Scams Hitting Your Phone Right Now in 2026
Real examples based on active fraud campaigns reported by the FBI, FTC, and international intelligence agencies. Here's what to watch for — and what ScamSignal catches that you might miss.
Why These Scams Are Different Now
Here's what changed: scammers now use AI to write messages with no typos, no awkward phrasing, and no obvious red flags. The old advice — "look for spelling errors" — doesn't work anymore. That's why we built ScamSignal. It uses AI to catch what AI creates.
Below are six fraud campaigns actively flagged by the FBI, FTC, FCC, IRS, and Dutch intelligence. For each one, we show a representative example message, explain how it works, and link to the agency that reported it. The next scam you receive won't match these word-for-word — but ScamSignal will still catch it. Paste any suspicious message at scamsignal.ai and see for yourself.
The next suspicious message you get won't look like any of these examples. Paste it into ScamSignal before you click, call, or respond.
1. The Toll Road Text ($6.99 That Steals Your Identity)
"Your toll account has an outstanding balance of $6.99. Pay within 24 hours to avoid a late fee of $50.00 and possible license suspension."
The FBI received over 60,000 complaints about this scam in 2024 alone. The FTC and FCC have both issued warnings. Palo Alto Networks found attackers have registered over 10,000 fake domains impersonating toll agencies across at least 10 states. The scam nearly quadrupled in early 2025 (McAfee data).
- Unsolicited text about a toll you don't remember
- Small dollar amount designed to feel not worth questioning ($3-$12)
- Threatening language: "license suspension," "late fee"
- Link that doesn't match your state's official toll website
Never click a link in a toll text. Go directly to your state's official toll website or app to check your balance. Report the text to the FBI's IC3 at ic3.gov.
2. The Fake Package Delivery ("Your USPS Package Is Waiting")
"USPS: Your package has been held at our facility due to an incomplete delivery address. Please update your information within 48 hours or the package will be returned to sender."
The US Postal Inspection Service has warned that scammers send up to 100,000 of these texts per day. One operation harvested 390,000 credit card numbers. The goal is never a redelivery fee — it's your credit card number and personal information.
- USPS will never send unsolicited texts with clickable links
- Urgency: "48 hours" or "returned to sender"
- Asks you to "update" or "verify" your address or payment info
- Domain in the link is not usps.com
USPS only sends texts if you specifically requested tracking updates — and those texts never contain clickable links. Go directly to usps.com with your tracking number. Report suspicious texts to spam@uspis.gov.
3. The Fake Bank Alert ("Unauthorized Activity Detected")
"Chase Alert: We detected unauthorized activity on your account ending in 4829. Your account has been temporarily locked. Verify your identity immediately to restore access."
The FBI issued a specific alert about bank account takeover fraud: since January 2025, they've received over 5,100 complaints with losses exceeding $262 million. Imposter scam losses overall reached $2.95 billion in 2024.
- Text or call asking you to "verify" with a link or phone number
- Urgency: "immediately," "temporarily locked"
- They already know your account's last 4 digits (this is publicly scrapeable — not proof of legitimacy)
- Link goes to a domain that isn't your bank's official website
Your bank will never text you a link to verify your identity. Hang up, then call the number on the back of your debit card. Never share one-time passcodes with anyone who calls you.
4. The IRS Tax Notice ("Your Return Has Been Flagged")
"IRS Notice: Your 2025 tax return has been flagged for review. You have an outstanding balance of $1,247.00. Failure to respond within 72 hours may result in legal action."
The IRS Dirty Dozen for 2026 (published March 5, 2026) specifically warns about identity theft targeting IRS online accounts, misleading tax advice on social media, and aggressive collection scams. The IRS Taxpayer Advocate identified tax scams as one of the 5 most serious problems facing taxpayers. People over 60 lost nearly $5 billion to internet crime in 2024, with tax scams a major vector.
- The IRS will never contact you by text, email, or social media
- Threats of "legal action" or arrest for unpaid taxes
- Demands for immediate payment via gift cards, wire transfer, or crypto
- Links to websites that aren't irs.gov
The IRS always initiates contact through postal mail — never by text or email. If you're worried about your tax status, go directly to irs.gov or call 1-800-829-1040. Report tax scams to phishing@irs.gov.
5. The AI Voice Clone Call ("Grandma, I'm in Trouble")
"Grandma, it's me. I was in a car accident and I'm at the hospital. Please don't tell Mom and Dad — I need you to wire $3,000 for bail right now or they're going to keep me here."
It's not your grandchild. It's an AI clone of their voice, generated from as little as 3 seconds of audio scraped from social media. The 2026 International AI Safety Report confirms voice cloning tools are now free and produce clones indistinguishable from real voices. A Hiya study found 1 in 4 Americans received a deepfake voice call in the past 12 months, and 77% of victims lost money. Seniors lose an average of $1,298 per attack — 3x more than younger adults.
After the call, scammers often follow up with a text containing a payment link — and that's what you can paste into ScamSignal.
- Unexpected call from a "family member" in distress asking for money
- Caller insists you not tell other family members
- Requests for wire transfer, gift cards, or crypto
- Unnaturally smooth voice quality with zero background noise
- Follow-up text with a payment link after the call
Establish a family safe word that only your household knows. If you get a distress call, hang up and call the person back on their real number. Never send money based on a phone call alone — no matter how real it sounds.
6. The Fake Refund Call ("You've Been Overcharged $429.99")
"We noticed you were overcharged $429.99 on your recent Norton LifeLock subscription renewal. To process your refund, please call our billing department immediately at 1-888-445-2913."
When you call, they ask for remote access to your computer to "process the refund" — then steal your banking credentials. The FTC returned $25.5 million to tech support scam victims in 2025. Older consumers reported $159 million in losses to tech support scams in 2024 alone — and consumers 60+ are 5x more likely to lose money to these scams.
Even worse: AARP warns that after you've been scammed once, criminals sell your information to "recovery scam" operators who call pretending to help you get your money back — for an upfront fee. The FBI flagged scammers impersonating the IC3 itself in recovery scams.
- Unsolicited call or email about a subscription you don't remember
- They want you to call a phone number (not your bank or the real company)
- Requests for remote access to your computer
- Anyone who contacts you promising to recover money you already lost
If you get an unexpected charge notification, log into the service directly (norton.com, your bank app) — never call the number in the message. No legitimate company needs remote access to process a refund. Report to the FTC at reportfraud.ftc.gov.
Every one of these scams relies on the same trick: urgency that stops you from thinking. "24 hours." "Immediately." "Legal action." The moment you feel rushed, that's the red flag. But here's the problem — the next scam you receive won't look like any of these examples. AI-generated phishing has no typos, no awkward phrasing, no obvious tells. That's exactly why ScamSignal exists. The next time a message makes your stomach drop, don't click — paste it. ScamSignal catches what you can't see. Only 4% of scam victims report their losses. Don't be a statistic. Don't be silent.
Get notified when we publish updates on this topic
We'll send you one email when new information is available. No spam.
Toll Road Payment Scam (SunPass / E-ZPass)
Fake texts claiming you owe a small toll fee with a link to a spoofed payment site. The top new scam of 2025, up 900% in one year. The small dollar amount ($3-$12) is intentional — it feels believable and not worth questioning.
Fake Package Delivery Notification
Fraudulent texts or emails from fake USPS, FedEx, UPS, or Amazon accounts claiming a package can't be delivered, needs rescheduling, or requires a small redelivery fee. The #1 most-reported text scam narrative in 2024 per FTC Data Spotlight (April 2025). $470M reported lost in text-contact fraud, with $1,000 median loss per victim.
Bank Account Phishing Alert
Fake urgent alerts appearing to come from your bank about suspicious activity, locked accounts, or failed transactions. Bank impersonation is the #1 most common text scam type, accounting for 10% of all smishing messages according to the FTC.
IRS Tax Refund Phishing
Fake IRS emails or texts about unclaimed tax refunds, stimulus payments, or tax credits directing victims to phishing sites that harvest Social Security numbers, banking details, and other PII. Tax-related scams cost an average of $8,199 per person in 2024.
AI Voice Cloning & Deepfake Scam
Scammers use AI to clone the voices of family members, executives, or authority figures from just seconds of audio. Voice cloning has crossed the 'indistinguishable threshold' — clones now include natural breathing, pauses, and emotion. Deepfake-as-a-service platforms make this accessible to anyone for under $2. Global losses exceeded $200M in Q1 2025 alone.