Fake Software Update Scams on SMS / Text
Scam texts claim your phone or an app needs an urgent update, linking to malicious downloads or phishing pages disguised as official patches.
Part of: Fake Software Update Scams
Last reviewed: 1 June 2026
A fake update text targets the phone directly: a message warning that your operating system, banking app, or security software needs an immediate update, with a link to install it. The personal device and the routine nature of updates make the prompt easy to follow.
Genuine updates arrive through the device's settings or the official app store, never through a text-message link. Scammers exploit the update habit and the urgency of a 'security' warning to deliver malware or steer victims to a phishing page.
How this scam works on SMS / text
The text states your phone or a specific app is outdated, vulnerable, or about to stop working, and provides a link to 'update now'. The sender may be spoofed to look like a vendor or your provider.
The link leads to a download of malware disguised as an update, or to a phishing page that captures account credentials under the pretext of 'verifying before updating'. The action stays on the phone, with little chance to inspect the source.
The security framing and the convenience of a one-tap install are built to prompt action before the victim questions why an update would arrive by text.
Common red flags
- A text says your phone or app needs an urgent update via a link
- You are warned the device or app will break or be unsafe unless you act now
- The link leads to a download or login page rather than the app store
- The sender ID is spoofed to look like a vendor or provider
- You are asked to verify credentials 'before updating'
- The download is an app file from outside the official store
How to protect yourself
- Install updates only through your device settings or the official app store
- Never tap an 'update' link in a text message
- Treat urgent 'your device is unsafe' texts as suspect
- Do not enter credentials on any page reached from an update text
- Enable automatic updates from the official source where possible
- Delete the text and block the sender
How to report it
- Forward the text to your national smishing or spam reporting number where available
- Report the impersonation to the vendor or provider via its official site
- File a report with your local fraud or cybercrime reporting service
Frequently asked questions
Would my phone send a software update by text with a link?
No. Genuine updates come through your device settings or the official app store, never via a text-message link. Such links deliver malware or phishing pages — ignore them and update through the official source.