How SMS scam gangs actually operate

Escudo guide · Updated July 2026

It was never personal

The most useful thing to understand about a scam text is that it is not about you. You were not chosen. Your number sat in a list of hundreds of thousands, bought, leaked or simply guessed, and the same message went to all of them at once. If it mentions your bank, it is because a lot of people bank there, not because anyone looked you up. Feeling singled out is part of the effect, and it is an illusion.

These are not lone tricksters. They are businesses, with roles, suppliers and working hours. Some are tightly organised gangs. Some are grim operations where trafficked people are forced to run scams under threat. The message that lands so casually on your phone is the front counter of a large and ugly machine.

The four parts of the machine

• The list. Phone numbers gathered from data breaches, sold on, or generated in bulk. Cheap and endless.
• The bait. The message. A bank alert, a parcel fee, a tax rebate, a family emergency. Written to trigger one feeling fast: fear, or hope.
• The trap. A fake web page that looks like the real bank or courier, built to harvest your card, password or a security code the moment you type it.
• The cash out. The part you never see. Details are used or resold within minutes, money is moved through accounts, and it is gone.

Every scam text you have ever received is just these four parts wearing a different costume.

The same script in every country

Here is the part that gives the game away. The exact same con runs across the world, translated line by line. Once you have seen it in two countries, you can predict it in a third.

• The "family on a new number" scam. In the UK it is "Hi Mum, this is my new number". In Portugal it is "olá mãe, mudei de número". In Spain it is "mamá, cambié de número". Same wound, three languages. Full guide: the Hi Mum and family emergency scam.
• The parcel fee scam. UK: a fake Royal Mail, Evri or DPD redelivery fee. Spain: a fake Correos postage charge. Brazil: fake Correios messages. Always a tiny fee, always after your whole card. Full guide: the parcel redelivery fee scam.
• The bank alert. UK: Barclays, Monzo, HSBC, NatWest. Spain: a fake message from a local bank. Brazil: "sua conta será bloqueada". Same fake lock, same fake link. Full guide: the fake bank text.
• The tax rebate. UK: a fake HMRC refund or an "you owe tax" threat. Spain: a fake Agencia Tributaria return. Portugal: a fake Autoridade Tributária message. Free money or fear as bait, everywhere. Covered inside the fake bank text.

The fact that Escudo started against these scams in Brazil and Portugal and sees the very same scripts land in the UK is not a coincidence. It is one global industry with local branches.

The three levers they always pull

Strip away the costume and every scam pulls the same three levers.

1. Emotion. Fear that your money is gone, or hope that money is coming. Strong feeling switches off careful thinking, which is the entire goal.
2. Urgency. "Today", "within the hour", "final notice". Time to think is the enemy of the scam, so it removes it.
3. A single easy action. One tap, one form, one code. The path is made frictionless on purpose. Friction is where you would wake up.

When a message makes you feel something strongly and want to act right now through one link, that combination itself is the warning. Not the logo, not the phone number, the feeling.

Your defence is a habit, not a checklist

1. Slow down on purpose. The scam needs speed. Taking two minutes is often the whole defence.
2. Never use the link or number in the message. Reach the bank, courier or tax office the way you already know: their app, or the number on your card.
3. Verify through a second channel. Especially for anything about family or money. Call the number you have saved, not the one that contacted you.
4. Assume the surprise fee, rebate or alert is fake until you have checked it yourself. You lose nothing by checking. You can lose everything by not.

Already tapped or paid?

• If you tapped a link or typed details, follow you already tapped a scam link, and call your bank on the number on your card.
• If you sent money to a "family member", call your bank now, and read the family scam guide.
• Report to Action Fraud at actionfraud.police.uk or 0300 123 2040. In Scotland, report to Police Scotland on 101.
• Forward the scam text to 7726 free of charge, it spells SPAM on the keypad.

Where a filter fits, and where it does not

You cannot personally stop a global industry from sending messages. What you can change is how many of them reach the person you are trying to protect. That is what the Escudo app does: it helps filter the known patterns behind these scripts on the iPhone and sets matching texts aside before they are read, so there is far less to react to.

Be clear on what it is and is not. It helps filter known patterns. It does not block every scam, it cannot promise safety, and it never claims to know whether a particular message is genuinely from your bank or your child. That judgement stays with you and the habits above. Nothing is deleted, messages are only moved to a junk folder, and they never leave the phone. The point is simple: fewer of these reaching your mum or dad in the first place, so the few that matter are easier to catch.