Scam SMS messages often imitate banks, delivery companies, mobile providers, government departments, streaming services and other organisations people recognise.
Look for urgency, threats, unexpected rewards, account warnings, unusual payment requests and links that ask you to sign in or provide information.
Do not use the phone number or link supplied by the suspicious SMS to verify the claim. Open the organisation's official app or website yourself, or use contact details you already trust.
Never provide your password, PIN or one-time password simply because an SMS requests it. Legitimate services should not require you to hand over sensitive authentication information through a suspicious message.
If you already clicked the link or shared information, use Get Help for what happened next. The correct response depends on whether you entered a password, provided banking details, downloaded a file or lost access to an account.