You get a text out of nowhere: your package is delayed, your bank account is locked, or you owe money for unpaid tolls. There's a link. It looks urgent. What do you do?

If your gut says something's off, trust it. Scam texts—sometimes called "smishing"—are everywhere now, and they're getting harder to spot. Here's how to protect yourself.

Scams happening right now in Oklahoma

These aren't hypothetical—they're hitting Oklahomans' phones right now: 

• Fake PlatePay and PikePass texts claiming you have an unpaid toll balance and threatening a $35 late fee if you don't pay immediately.
  The texts link to websites that look almost identical to the real Oklahoma Turnpike Authority site—but they're not. OTA says this scam has gotten "more sophisticated" in recent weeks. If you get one of these, don't click. Contact Platepay or find your real balance at platepay.com.
• IRS and "tax resolution" robocalls pressuring people to call back about supposed back taxes or "relief programs." The IRS will never contact you first by phone or text—only by mail. 
• Tax refund phishing texts claiming your refund has been "approved" and asking you to click a link to verify your identity. It's a trick to steal your Social Security and bank info.  

You didn't start the conversation

Legitimate companies rarely text you first about problems with your account. If you get an unexpected message claiming something is wrong, that's your first red flag. Banks, the IRS, and toll authorities almost never ask you to fix urgent issues over text.

It wants you to click a link

Scam texts almost always include a link. It might look close to a real website—like "platepay-ok.com" instead of "platepay.com"—but it's not. Don't tap it. If you think there's a real issue, go directly to the company's website or app yourself.

The tone is urgent or threatening

"Act now or your account will be closed." "Pay now to avoid a $35 fee." "Failure to verify will result in legal action." Scammers want you to panic and click before you think. Real companies don't threaten you over text.

It asks for personal information

No legitimate organization will ask for your password, Social Security number, or credit card info via text message. Ever. If a text asks for these, delete it.

The number looks weird

Scam texts often come from long, unfamiliar numbers, or short codes that don't match the company they claim to be. Some even come from email addresses. That's not how real businesses operate.

What to do if you get one:

1. Don't click anything.
2. Don't reply—even "STOP" can confirm your number is active.
3. Block the sender.
4. Report it:
1. Phone: You can report junk directly in the Messages app or forward the text to 7726. Here's how.  
2. Android (Google Messages): You can block and report spam in a few taps. Here's how. 

If you're unsure whether it's real, contact the company directly using a number from their official website.  

What if you already clicked?

Don't panic, but act quickly. If you entered any login info, change that password immediately. If you entered payment info, call your bank. Consider running a security check on your phone and keep an eye on your accounts for anything unusual.

The best defense for spam calls and texts is a slow finger! When a text feels urgent, that's exactly when you should pause. Scammers are counting on you to react fast—don't give them the satisfaction.