A phishing text aimed at your child rarely announces itself as a scam. It looks like something they want to tap: free Robux, a Discord gift, a locked gaming account, or an urgent message that appears to come from a friend.
Confidence is not the same as recognition: in a 2025 survey of 1,000 UK teens ages 13–16, 77% said they could spot a fake text, yet half failed when shown one.
This guide shows you the red flags, kid-specific examples, and exact steps to take whether the text is still unopened or your child has already clicked.
What a phishing text aimed at your child actually looks like
Phishing texts sent to kids almost always share a few tells: an urgent or too-good-to-be-true message, a link to an unfamiliar or misspelled address, and a request to log in, pay, or share personal details.
If your child gets one, the rule is simple — don’t tap, don’t reply, bring it to a parent.
You pick up your kid’s phone and see: « 🎉 You’ve won 10,000 free Robux! Claim now before it expires 👉 [link]. » Or maybe it’s « Your account has been locked — verify here. » That’s a phishing text, and it was built to be tapped.
Phishing is when a scammer pretends to be someone trustworthy to trick you into handing over passwords, money, or personal details. When it arrives by text message, it has its own name: smishing (SMS phishing).
The tells are almost always the same:
- Urgency or a threat — « act now, » « your account will be deleted, » a countdown timer.
- Too good to be true — free in-game currency, a prize, a giveaway.
- An unknown or odd sender — a random number, or a « brand » your child doesn’t actually use.
- A suspicious link — a misspelled web address or a shortened link that hides where it really goes.
- A request — log in here, pay a small « fee, » confirm your details.
The texts adults get are usually fake bank alerts or « your package couldn’t be delivered. » Kids get a different menu, tuned to what they care about:
- Free Robux, V-Bucks, or Minecoins « drops » if they log in or share their account.
- « You’ve been gifted Discord Nitro » with a link to claim it.
- Free followers, likes, or a « verification » badge for Instagram or TikTok.
- A fake « your game account is locked » alert asking them to sign in again.
The goal behind all of them is the same: get your child to tap, then capture a login or a payment.
Why scammers target kids and teens (and why the messages work)
Younger users tend to trust messages more and pause less before reacting — a pattern security researchers see consistently across age groups. A « free Robux » link doesn’t get the skeptical second look an adult might give a fake bank text.
Kids are also on their phones constantly, so a hook tied to a game or social app lands while they’re already in that headspace and moving fast.
Spoofing makes it worse. Scammers can make a text look like it came from a friend, a brand, or even a number your child recognizes — so « is this person real? » isn’t an obvious question to ask.
For example, a sender name that says « Roblox Support » proves nothing by itself. Open the official app or type the known website address instead of trusting the name or link in the message.
The 5-second checklist: how to tell a real text from a scam
Teach your child to run any surprising text through five quick questions. It works on every message, not just ones you’ve seen before.
- Who is it really from? An unknown number, a weird sender, or a brand they don’t use is a red flag.
- Is it rushing me? Urgency, threats, and countdowns are pressure tactics, not real customer service.
- Is it too good to be true? Free currency, prizes, and giveaways almost never arrive by surprise text.
- Where does the link actually go? Misspelled domains and shortened links are hiding something.
- Is it asking for something? A password, a payment, or personal details — stop right there.
One « yes » is enough to treat the message as a scam.
What to do the moment your child gets one
Recognition is step one. Here’s exactly what to do next.
- Don’t tap the link, don’t reply, don’t call back. Avoid giving the sender any information or opening a page designed to steal it.
- Forward the text to 7726 (SPAM). This reports it to mobile carriers so they can act on the number.
- Report it to the FTC at ReportFraud.ftc.gov, then block the number.
- Verify any « real » alert independently. If a message claims an account problem, open the official app or type the website yourself — never use the texted link.
- Thank your child for bringing it to you. Make showing you the easy, no-trouble choice so they keep doing it.
The FTC’s guidance for suspicious text messages is to verify a message through a phone number or website you already know is real, rather than using the contact details in the text.

Together these steps cut off the scammer and build the habit.
If your child already tapped: close the page, disconnect the device from the internet if a download started, and run its built-in security scan. If they entered a password, change it from a trusted device and turn on multi-factor authentication; if they entered payment details, contact the card issuer promptly.
Monitor or just talk to them? A simple decision framework
Whether you need monitoring software depends on your child and the situation — not on how scary the internet feels this week.
A conversation is usually enough when you have an older, cautious teen who already flags weird texts, asks before tapping links, and brings questionable messages to you on their own.
Monitoring helps as a safety net when your child is younger, when they’re being targeted repeatedly, when they’ve already clicked something risky, or when you’re seeing signs they’re hiding messages from you.
Either way, monitoring is a backstop — not a substitute for the conversation. If you’re weighing it on a shared family computer as well as a phone, our guide to monitoring your child’s computer remotely walks through the same balance.
How FlexiSPY helps you catch the texts before they cause harm
If you decide a safety net makes sense, FlexiSPY on Android lets you see the messages where these lures actually land.
The Lite tier and above lets you read incoming and outgoing SMS and MMS, so a « free Robux » text or a fake account alert appears in your dashboard where you can review it calmly.

Phishing doesn’t only arrive by text. The Premium tier also covers the messaging apps where these hooks land — Instagram Direct Messages, Snapchat, WhatsApp, Discord, and Telegram among them.

Dashboard Alerts are also available, so you can use the dashboard’s alerting tools alongside message review. FlexiSPY does not automatically identify or block phishing, so a parent still needs to judge the message in context.

Browsing activity also shows whether a link was actually opened — so if your child tapped before asking, you’ll know to follow up on passwords and accounts straight away.

For a younger child you can run FlexiSPY in Hidden Mode. For an older one, the Visibility Option lets you keep it openly installed as an agreed safety tool.
FlexiSPY works on all Android devices and versions, and rooting is not required. There is no iPhone or iPad product.
If browsing and search habits are part of what concerns you, our guide to monitoring your child’s search history pairs well with this one.
Where monitoring stops — and the conversation has to start
Monitoring shows you that a phishing text exists. It doesn’t teach your child to recognize the next one — that judgment is the skill they carry to every new app and device.
On an older teen’s phone, lean toward being open about monitoring where that fits your family. Only monitor a device you own or have legal authority or consent to monitor — your minor child’s phone is the clear case.
Monitoring another adult, including a partner, without their consent can be illegal, and the rules vary by country and state. This is not legal advice — if you’re unsure about your situation, check your local law or consult a lawyer.
Laws around message capture and call recording in particular vary widely by jurisdiction.
Build a family rule that sticks
Turn all of this into one rule a child can actually remember: show me before you tap. No trouble for asking, ever.
Then practice it. Pull up a real scam text together — a « free V-Bucks » message works well — and run it through the 5-second checklist out loud so the habit feels normal.
Revisit the rule each time your child gets a new app, a new game, or a new device, since that’s exactly when fresh lures start showing up.
For more ways to build these habits, see our 5 tips for keeping your child safe on the internet.















































