Scam library · Texts · Banking & payment apps · Shopping
Rewards points expiring text scam
A text arrives with your card issuer's, phone carrier's or a store's name on it: your rewards points expire today, and you can still redeem them for cash back or a gift if you tap the link. Many people really do have points sitting in an account, so the message feels like a helpful reminder rather than a trick.
The FTC says people are reporting that some of these texts come from scammers. The link doesn't lead to your real rewards account. It leads to a look-alike page built to collect your personal and card details, or to put harmful software on your phone.
What the message looks like
From: +1 555-0142
Rewards Notice: Your 12,850 points expire TODAY at 11:59 PM. Redeem now before they're gone:
cardrewards-redeem[.]top/claim
Reply STOP to opt out.
How this scam works
The text names a points balance and a same-day deadline so you act before you think. Tapping the link opens a page with familiar logos that asks you to sign in, 'verify' your card, or enter your card number to cover a small shipping charge for your reward. Anything you type goes to the scammers.
The FTC warns the goal is information like your Social Security or credit card number, or getting you to download harmful software. Card networks have described similar campaigns: Mastercard's warning, shared by banks, says some texts push urgent 'rewards expiring' language and some include a phone number that connects you to the fraudster instead of your bank.
Security writers have reported that phone-carrier rewards programs have been used as bait too, and the brand names change often to dodge spam filters. The pattern stays the same: a deadline, a link, and a form that asks for more than a rewards check ever needs.
Red flags
- A text saying your points expire today or within hours.
- A link to a web address that isn't the company's usual site, often with extra words or an odd ending.
- A sender you don't recognize, such as a random phone number or email address.
- A redemption page that asks for your full card number, expiration date, security code, PIN or a texted code.
- A small 'shipping' or 'processing' fee to receive a free reward.
- A phone number in the text you're told to call about your points.
How to tell it’s fake
- Don't use anything in the text. Open your card issuer's, carrier's or store's app, or type its web address yourself, and look at your points there.
- Check whether your points really expire. Many programs show expiry dates inside your account, and some say points don't expire while the account is open.
- If you still aren't sure, call the number on the back of your card or on the company's official website and ask about the message.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- If you only opened the page, close it and don't enter anything. Make sure your phone's software is up to date.
- If the page asked you to download an app or profile, don't install it. If you already did, remove it and ask your carrier or a trusted repair shop to check the phone.
If you paid
- If you entered card details or paid a 'shipping fee', call your card issuer using the number on your card, report the charge as fraud and ask for a new card.
If you shared personal info, a password or a code
- If you entered your sign-in details, change that password right away from the real app or website, and change it anywhere else you used it. Turn on two-step verification.
- If you shared your Social Security number, visit IdentityTheft.gov for a recovery plan and consider a free credit freeze with the three credit bureaus.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard is a Chrome and Edge extension on your computer, so it can't read the texts on your phone. If you open a rewards link on your computer, it checks whether the address matches the real company and warns you about look-alike sign-in and payment pages before you type. When a message seems legit but rushed, get a scam expert's second opinion first.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Chrome에 추가
Edge에 추가
Firefox에 추가
Opera에 추가Questions people ask
- Are all texts about expiring points scams?
- No. Some companies send real reminders. The safe habit is the same either way: ignore the link and check your points in the company's own app or website.
- Why would scammers want my points?
- Usually they're after more than points: your card number, sign-in details or personal information, which they can use for fraud.
- How do I report the text?
- Forward it to 7726 (SPAM) to alert your carrier, use your phone's report junk option, then delete it. You can also report it at ReportFraud.ftc.gov.