SMS and Call Scams in Thailand: Common Patterns and How to Verify

Almost everyone in Thailand has received one: a text about a parcel that cannot be delivered, a call from someone who says there is a problem with your bank card, a message that promises a loan or a prize. Most are easy to ignore. A few are convincing enough to catch careful people on a busy day, and the cost of a mistake can be a drained bank account.

This article describes the common patterns without exaggeration, explains how to verify a message or call, lists what to do if you have already clicked or shared something, and says plainly what a VPN does and does not do here. We do not quote statistics or name agencies' phone numbers, because those change and you should always get them from official sources. The habits below work whatever the exact script is.

Why these scams work

Scams are not clever technology. They are clever psychology. Nearly every scam call or message uses the same three levers.

• Urgency. "Your account will be frozen in one hour." "Your parcel will be returned today." Pressure removes thinking time.
• Fear or authority. A caller who claims to be from the police, a court, customs, a bank or a government office makes people comply. Real officials do not ask you to move money to a "safe account" or to install an app so they can "check" your phone.
• Reward or relief. A prize, a refund, a loan with no checks, a quick job. The offer is too good for the effort.

If you remember one rule, make it this: a real organisation will let you hang up and check. Anyone who tries to keep you on the line, tells you not to tell your family, or insists that you act now is a warning sign in itself.

The common patterns

Details change from month to month, but the shapes are stable.

Fake parcel and delivery messages

You receive a text or chat message that a parcel is held, an address is incomplete or a fee is due. It includes a link. The link leads to a page that looks like a courier site and asks for your card details, your OTP, or asks you to install an "app" to track the parcel. If you were not expecting a parcel, ignore it. If you were, open the courier's official app or type its website address yourself and use your tracking number.

Callers who pretend to be officials

Someone calls and says that you are linked to a crime, that a package in your name contained something illegal, or that your ID has been used. They may transfer you to a "senior officer" and may use video calls with an official-looking background. They then ask you to move money to a "safe account", to share bank details, or to keep the matter secret. No genuine official process works like this. Hang up, and if you are worried, contact the organisation through channels you look up yourself, or report to the police through official channels.

Fake bank and card alerts

A message or call says there is suspicious activity, your card is blocked or your points are about to expire. It comes with a link or a number to call back. The link opens a convincing copy of a bank login page; the number reaches the scammer. A real bank will not ask for your full PIN, your OTP, or your password. If in doubt, close the message and open your bank's official app, or call the number on the back of your card.

Loan and investment offers

You receive a message offering a fast loan with no checks, or a high-return investment tip from a "friendly" stranger. First the scammer asks for a fee, a deposit or a "tax" to release the money. Then more fees follow. A legitimate lender does not charge you before paying out. Treat any offer that pays quickly for no effort with suspicion, and check whether a lender or broker is licensed through official regulator websites.

Links that install remote-control apps

This is the most damaging pattern. The scammer tells you to install an app, often from a link, saying it is needed to track a parcel, verify your identity, join a video call or claim a refund. The app is not from the official app store. Once installed, it asks for broad permissions, such as accessibility features, screen sharing or reading messages. With these, the scammer can see your screen, read OTPs as they arrive and tap buttons for you.

The rule is simple: never install an app because a call, message or link told you to. Install apps only from the official store of your phone, and only ones you went looking for yourself.

Messages through chat apps and social media

Scammers also use chat apps and social platforms. A friend's account is taken over and asks for urgent money; a stranger starts a friendly conversation and moves to investment; an online shop takes payment and disappears. Verify a friend's request by calling them on a number you already have.

How to verify a call or message

A short routine helps when you feel rushed.

1. Stop and breathe. Scams depend on speed. Nothing legitimate becomes worse if you wait ten minutes.
2. Do not click, and do not call back the number provided. Links and numbers in messages are controlled by the sender.
3. Contact the organisation yourself. Open its official app, type its website address into the browser, or call the number printed on your card, bill or official documents. For a bank, "the number on the back of your card" is the safest default.
4. Ask someone you trust. A family member, a colleague or a friend sees what you cannot when you are anxious.
5. Check the details. Look at the address a message links to. Look for spelling slips, odd domain names and requests that do not match how the organisation normally communicates. Our guide on how to recognize phishing websites goes through these checks step by step.
6. Never share one-time codes. OTPs, PINs and passwords are for you alone. No genuine staff member needs them from you by phone.

The US cybersecurity agency CISA gives the same general advice in its guide to recognising and reporting phishing: slow down, look for the signs, do not click, and report.

A plain example

Somchai, a retired teacher, gets a call from someone who says he is from the police. The caller says Somchai's ID was used to open a bank account used for fraud, and that a case officer will contact him over a video call. A second person appears and tells him that to prove his innocence, he must install an app that lets the "investigators" see his phone and move his savings into a "safe account" until the case is closed. He is told not to tell his family because the matter is confidential.

Somchai feels frightened, but one detail bothers him: nobody genuine asks for secrecy and a transfer. He hangs up, calls his daughter and then phones his bank using the number on the back of his card. The bank confirms there is no such case and no safe account. He does not install anything. Afterwards he reports the call through official channels and keeps the number and time of the call.

What helped was not technology. It was the habit of stopping, hanging up and checking through a channel he chose himself.

What a VPN does and does not do

People sometimes ask whether a VPN would block scams. The honest answer is mostly no.

Question	Does a VPN help?
Block scam phone calls	No. Calls arrive through the mobile network
Filter scam SMS	No. Texts arrive through your phone number
Stop you from clicking a bad link	No. It cannot judge links for you
Stop an app you installed from spying on you	No
Protect your traffic on public Wi-Fi	Yes, in the way it normally does
Make a fake website real or a real one fake	No

A VPN encrypts internet traffic between your device and the VPN server, which is useful on shared networks. Scam calls and texts reach you through your phone number, and the scam itself works by persuading you, not by attacking your connection. Treat a VPN as a separate, useful layer for different problems, and see what a VPN cannot protect you from if you want the plain list. Phone-number takeovers are a different risk, covered in SIM swap fraud.

Practical steps to reduce your exposure

• Use your phone's own tools. Many phones and apps can filter unknown callers and report spam; look in your phone and messaging settings, since the wording varies by version.
• Block and report unknown senders. Do not reply, even to say stop. A reply tells the sender your number is active.
• Reduce shared data. The less your number, address and ID are posted or entered into random forms, the less material scammers have.
• Turn on two-factor authentication properly. Prefer an authenticator app or passkey over SMS for important accounts; our guide to two-factor authentication explains the options, and CISA's More than a Password page gives the reasoning.
• Keep your phone updated and install apps only from the official store.
• Set transaction alerts in your banking app so that unusual activity is visible immediately.
• Talk to family. Older relatives and teenagers are common targets. A short, calm conversation about "real officials never ask for transfers or installs" helps more than a long warning.
• Be careful with QR codes and fake offers. Fake discount QR codes and fake eSIM or SIM offers exist; the guide to avoiding scams when buying an eSIM on the sister site eSIMonline lists sensible checks.

If you clicked or shared something

Do not be ashamed. These scams catch careful people. What matters is speed.

1. Disconnect the phone from data and Wi-Fi if you installed an app or allowed screen sharing, then remove the app.
2. Call your bank at once, using the number on your card or the official app. Say you may have been scammed, and ask them to stop transactions and block cards.
3. Change passwords for email, banking and messaging, from a different, safe device.
4. Check accounts for transfers, new payees, new devices and changed contact details.
5. Contact your carrier if the phone behaves strangely or loses service; see SIM swap fraud.
6. Keep evidence. Save screenshots, numbers, messages and times.
7. Report to the police through official channels, and report the number or message through your messaging app too.
8. Watch for follow-up scams. After a first scam, criminals sometimes pose as "recovery" or "refund" services. Be extra careful.

Limits and what to watch for

• No filter catches everything. Spam filters and call-labelling apps reduce noise, but new numbers and new scripts get through. Your judgement is the last check.
• Official-looking is not official. Logos, uniforms on video calls, case numbers and caller names can all be faked.
• Do not trust caller ID alone. Numbers and names that appear on screen can be spoofed.
• Public information changes. Agencies and banks update how they contact customers. Use their official websites and apps for current advice, and be cautious about numbers quoted in articles, including this one.
• Fear makes smart people act fast. If you feel panic, that is the moment to hang up.

Summary

Scam calls and texts in Thailand follow familiar patterns: fake parcels, fake authorities, fake banks, easy loans and links that install remote-control apps. They all rely on urgency, fear or reward. The defence is a habit: stop, do not click, hang up, and verify through the bank's official app, its website or the number on the back of your card. Never install an app because someone told you to, never share OTPs, and report incidents through official channels. A VPN helps on public Wi-Fi but does not block scam calls or messages. If you want to review options for safer connections on the move, you can read the help pages at your own pace.