How do you check a fake delivery SMS with AI?
Verify a suspicious parcel, bank or government text with an AI-powered scam check before you tap anything.
Short answer
Do not tap the link. Copy the message text and the sender number, paste them into an AI scam-check chat such as Malwarebytes Scam Guard, and read the assessment. Then confirm the delivery or bank detail only inside the company's own app, report the link to your national cybersecurity reporting site, and delete the message.
What you need
Step by step
Stop before tapping
The moment you read the message, do not touch any link, button or "track your parcel" text. Fake pages start asking for card and password details the second they open. Put the phone down and check the message first.
Copy the message text
In your SMS app, press and hold the message and tap "Copy". Note the sender number or the sender ID too. A screenshot also works, since some AI tools let you upload an image and ask about it.
Install the Malwarebytes app
Search for "Malwarebytes" in Google Play or the App Store, install it and open it. Tap the chat icon in the bottom menu to reach the Scam Guard section. The chat feature works on the free tier, so you can skip the payment step.
Paste the suspicious text into the chat
Paste the copied message into the chat box and ask "Is this message a scam?". The AI explains the typical scam signals, the fake domain and what you should not do. Read the answer as a strong warning, not a final verdict.
Confirm through the official channel
If you are expecting a parcel, type the tracking number manually into the courier's own app or website. For a bank message, open your mobile banking app and check the transactions. Never call the number in the message; use the official number printed on the back of your card.
Report the link, then delete it
Submit the malicious link to your country's official cybersecurity reporting form, and report the scam content to the telecom regulator's complaint site. Then delete the message and block the number on your phone. That way the same link can be shut down before it reaches someone else.
Set up the same routine for family
Install the same app on your parents' or older relatives' phones and put a shortcut on the home screen. Give them one single rule: "Paste every message you doubt in here first, then send it to me." Remembering one rule is easier than memorising dozens of scam types.
Tips
Watch out
Delete national ID numbers, card numbers, IBANs and one-time passcodes from any text you paste into an AI chat. No AI is 100% accurate either, so a "safe" answer is not permission to open the link; always confirm the information inside the institution's own app.
Frequently asked questions
+Does Malwarebytes Scam Guard work outside the US?
The app installs from most regional app stores, but the chat mostly runs in English. If you paste the original message and ask your question in English, you usually get a useful assessment.
+Does it cost anything?
The scam-check chat sits on the free side of the app. Full antivirus and web protection need a subscription, but you do not have to pay just to check a message.
+I tapped the link by accident, what now?
If you entered nothing, close the page, clear your browser data and scan the phone with an up-to-date security app. If you entered card or password details, call your bank immediately to block the card and change your passwords.
+Can I use a different AI app instead?
Yes, you can paste the message into ChatGPT or a similar chat app and ask whether it is a scam. The result is still not proof on its own, so official verification remains essential.
+Where do I go if I was already scammed?
If money left your account, call your bank first to report the transaction, then file a criminal complaint with your local police or prosecutor's office. Report the link and number to your national cybersecurity and telecom complaint sites too.
Sources and verification
Last verified: 12 Eylül 2026. tell us. Reporting channels vary by country; use your national cybersecurity incident and telecom regulator complaint sites.
This content is for information only; for official procedures the relevant institution’s current announcements take precedence. Details: disclaimer.