What Are SMS Scam Messages?
Scam messages sent via SMS are called "smishing" - a combination of SMS and phishing. They impersonate real services like delivery companies, PayPay, Amazon, and utility companies, sending fake notifications about missed deliveries, payment failures, or account suspensions.
Tapping the link in these messages takes you to a fake website that looks identical to the real one, where you're asked to enter your ID, password, or credit card number. Any information you enter goes straight to the scam group.
Checkpoint 1: Check the Sender's Number
Legitimate companies usually send SMS from a company name or short number (about 5 digits). Scam messages typically come from mobile numbers starting with 070, 080, or 090, or numbers with +81 prefix. A "PayPay notification" from a mobile number is almost certainly a scam.
Checkpoint 2: Watch for "Act Now" Urgency
"Your account will be suspended today" or "Complete this within 24 hours" - time pressure is a classic scam tactic. Legitimate companies rarely set urgent deadlines via SMS. Take a breath and check the official app instead.
Checkpoint 3: Examine the URL Carefully
Check the link URL for subtle differences from the real address: amaz0n.co.jp (zero instead of o), paypay-support.xyz (wrong domain), sagawa-exp.com (wrong suffix). Shortened URLs (bit.ly, t.co) in SMS are also red flags.
Checkpoint 4: Check for Unnatural Japanese
Many scam messages are created by overseas groups and contain unnatural Japanese - wrong kanji usage, awkward honorifics, misplaced punctuation, or mixed full-width and half-width characters. However, natural-sounding scam messages are increasing, so natural Japanese alone doesn't guarantee safety.
Checkpoint 5: Verify Through the Official App
The most reliable method is to never tap SMS links. Instead, open the official app or type the official URL directly in your browser. If there's a real issue with your account, you'll see the notification there too.
What If You Already Tapped the Link?
If you only tapped the link without entering any information, close the browser immediately - you're likely safe. If you entered your ID, password, or credit card information, change your passwords immediately, contact your card company if applicable, and tell a trusted adult.