That “loan approved” text on your phone is a scam, the FTC warns

A text message announcing that a loan has been approved can feel like good news, especially for someone under financial pressure. But the Federal Trade Commission has warned that unsolicited “loan approved” texts, particularly ones referencing an application that was never submitted, are a scam engineered to steal personal and financial information. The messages are a form of smishing, the text-based cousin of email phishing, and they remain in circulation because they are cheap to send and occasionally profitable.

How the fake loan text works

The consumer agency describes a familiar setup. A text arrives claiming the recipient has been preapproved for a sizable loan, then asks for a Social Security number or bank account details to “finish” the application. The request for identifiers is the whole point, because that data can be used to commit identity theft or drain accounts. The supposed loan is bait, not a real offer.

The wording is calibrated to create momentum. Scammers lean on phrases such as “last step” and “reply YES,” or claims that an application is ready and merely awaiting a final confirmation, language designed to make it feel as though a legitimate process is already underway. Reacting to that false sense of an in-progress transaction, rather than pausing to question why a loan would be approved for an application no one filed, is exactly the response the fraudsters are trying to provoke.

The tell that gives it away

The clearest warning sign is the mismatch at the core of the message: an approval for a loan the recipient never sought. Legitimate lenders do not text strangers to announce preapproval and then immediately ask for a Social Security or bank account number by reply. The agency has emphasized that an unexpected text following up on an application that was never made is the signature of the scam, guidance laid out in its consumer alert on fake loan texts.

State financial regulators have echoed the warning as the messages continue to spread. The New Hampshire Banking Department, among others, has amplified the federal alert about fraudulent loan texts, a sign that the scheme has persisted well beyond its initial flagging and continues to reach consumers across the country. That the guidance was first published in January 2026 and is still being repeated by regulators months later reflects how durable text-based fraud has become.

Why responding at all is risky

A common instinct is to reply “STOP” or “NO” to shut down an unwanted text, but the agency warns that this approach backfires with scam messages. Any response, even a refusal, confirms to the sender that the number is active and that a real person is reading the texts, which can lead to more messages rather than fewer. The safer move is to avoid engaging with the content entirely.

Instead, regulators advise deleting the message and using a phone’s built-in tools to report it as junk, or forwarding it to 7726, which spells SPAM, to alert the wireless carrier. Suspected scams can also be reported to the FTC at ReportFraud.ftc.gov. Those steps route the message to entities that can act on it without signaling back to the scammer that the target is reachable.

The scale of text-based fraud

The push to warn consumers reflects how much money now flows through fraudulent texts. Reported losses to fraud totaled $12.5 billion in 2024, and text-initiated scams accounted for roughly $470 million of that figure, making messaging one of the costlier channels the agency tracks. Those totals capture only reported losses, so the true toll is almost certainly higher, since many victims never file a complaint.

Loan texts are one entry in a crowded field of smishing pitches that impersonate banks, delivery services, toll agencies and government offices. What unites them is a request to click a link or share sensitive information in response to an unsolicited message, often wrapped in urgency. Financial institutions have repeatedly noted that they do not solicit account numbers or Social Security numbers by text, which makes any such request a reliable red flag regardless of how official the message looks.

How to handle a suspicious message

Consumer-protection guidance converges on a few habits. A person who receives an unexpected loan approval should not reply, should not click any embedded link, and should not provide personal data, and if there is any question about whether an offer is genuine, the safest path is to contact the purported lender directly using a verified number rather than one supplied in the text. Deleting the message and reporting it closes the loop without exposing the recipient to further contact.

The broader lesson from the agency’s warning is that legitimate financial offers do not arrive as surprise texts demanding immediate personal details. For anyone weighing a message that promises money on easy terms, the combination of an unrequested approval, a request for identifiers and pressure to act quickly is enough to treat the text as fraudulent and move on. As the scheme shows no sign of fading, that skepticism remains the most effective defense.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview