A crypto scam text often imitates an exchange, wallet provider, bank or delivery service and creates an urgent reason to tap a link or call fake support. The goal may be to steal an account password, one-time code, card information or wallet recovery phrase. Surfshark Scam Text Protection is designed to identify suspicious SMS messages before the user interacts with them, but safe account verification remains essential.
Last reviewed: September 7, 2026. Availability, subscription requirements and mobile interfaces can change. Confirm the current feature in the official Surfshark application for your device and region. This independent guide is educational and does not guarantee detection of every scam.
What is a crypto scam text?
A crypto scam text is an SMS or similar mobile message that uses cryptocurrency as the subject or target of fraud. “Smishing” combines SMS and phishing: the attacker sends a message intended to make the recipient reveal information, install software, transfer money or approve an account action.
The sender does not need to know that a particular person owns crypto. Criminals can send the same message to thousands of numbers and wait for a small percentage of recipients to react. Data from an unrelated breach may also help them include a real name, email address or partial account detail.
Common fake exchange and wallet messages
| Message theme | Pressure tactic | Likely objective |
|---|---|---|
| “A new withdrawal is pending” | Cancel it immediately | Fake login or support call. |
| “Your account is suspended” | Complete KYC today | Identity documents and credentials. |
| “Wallet upgrade required” | Assets may become inaccessible | Recovery phrase or malicious app. |
| “You received an airdrop” | Claim before expiry | Wallet connection and harmful signature. |
| “Security team detected a login” | Call the supplied number | Fake support and remote access. |
| “Tax or recovery payment due” | Pay to release funds | Advance-fee fraud. |
A real company name, logo or sender label does not prove authenticity. Sender IDs and phone numbers can be spoofed, and a fraudulent message may appear in the same conversation as legitimate texts.
Red flags in a crypto SMS
- An unexpected link with a shortened, misspelled or unfamiliar domain.
- A deadline measured in minutes.
- A request for a seed phrase, private key, password or one-time code.
- A phone number presented as the only way to stop a withdrawal.
- Instructions to install screen-sharing or remote-access software.
- A request to move assets to a “safe,” “verified” or “recovery” wallet.
- A guaranteed refund, return or recovered investment after an upfront payment.
- Grammar, currency or account details inconsistent with the genuine service.
Good spelling does not make a message safe. Modern scam campaigns can generate polished, personalized text and build convincing copies of legitimate websites.
How Surfshark Scam Text Protection works
Surfshark describes its text message protection as a mobile antiscam feature that analyzes incoming messages for known scam patterns. Its purpose is to reduce exposure before a recipient taps a suspicious link. Surfshark states that the feature does not retain message content, generally monitor the phone or use messages to train AI models.
This feature is separate from the encrypted VPN tunnel. A VPN protects supported network traffic between a device and a VPN server; it does not normally inspect ordinary carrier SMS messages. Text protection requires its own mobile setup and permissions.
What happens on iPhone?
According to Surfshark’s launch instructions, a detected suspicious message on iOS is moved to the Spam area of Apple’s Messages application without a normal notification. Users can review filtered messages and recover a legitimate message if it was classified incorrectly.
Apple requires the user to select Surfshark as the text message filter. Enabling the feature only inside the Surfshark app may therefore be insufficient if the corresponding iOS setting is not completed.
What happens on Android?
On Android, Surfshark says the user receives a notification when a scam text is detected. Tapping the notification opens the message inside the Surfshark application in a controlled view intended to reduce accidental interaction.
Android behavior can differ by phone manufacturer, operating-system version, default messaging application and permissions. Follow the instructions shown by the current Surfshark app rather than granting unrelated applications access to messages.
How to enable text protection on iOS
- Install or update Surfshark from an official app store.
- Open Surfshark and select the Antiscam area.
- Open Text message protection and choose Turn on.
- Open iPhone Settings, then Apps and Messages.
- Open the unknown-sender screening and text-message filter settings.
- Select Surfshark as the filter and review the confirmation.
Apple may rename or relocate settings in later iOS versions. Use Surfshark’s current in-app walkthrough if the path differs.
How to enable it on Android
- Install or update the official Surfshark application.
- Open the application and find Text message protection.
- Follow the displayed setup process.
- Review each requested permission and confirm it belongs to the genuine Surfshark app.
- Check that Android battery restrictions do not silently disable required background behavior.
Do not install an APK received through a text claiming that a special “crypto protection module” is required.
What the feature can and cannot do
| Can help with | Cannot guarantee |
|---|---|
| Identifying suspicious patterns in incoming texts | Detection of every new or carefully targeted scam |
| Reducing accidental exposure to scam links | That every filtered message is fraudulent |
| Separating suspicious messages from the main inbox | Protection after credentials or a seed phrase are disclosed |
| Adding a warning before interaction | Verification that a cryptocurrency service is trustworthy |
False positives and false negatives are possible. Treat the filter as one defensive layer, not as permission to trust every message that remains in the inbox.
How to verify an exchange security alert safely
- Do not tap the message link or call its number.
- Open the exchange from a saved bookmark or its official mobile app.
- Check login, withdrawal and security-notification history.
- Contact support from the authenticated application if the alert cannot be explained.
- Review active sessions, API keys, withdrawal addresses and account email.
- Save evidence and report the text through the phone’s spam controls.
Do not reply, even with “STOP,” unless the sender has been independently verified. A response can confirm that a phone number is active.
If you clicked but entered nothing
Close the page and do not approve downloads, notifications, wallet connections or configuration profiles. Clear any download created by the visit, inspect newly installed apps or browser extensions, update the device and run a reputable security scan where supported.
Clicking alone does not always mean an account was compromised, but it can reveal an active device and expose the browser to a malicious page. Continue monitoring the relevant accounts.
If you entered a password or 2FA code
- Use a clean device and open the official service directly.
- Change the exposed password to a new unique value.
- End other sessions and remove unfamiliar trusted devices.
- Reset the affected 2FA method if compromise is possible.
- Remove unknown API keys and review withdrawal allowlists.
- Secure the connected email account and its recovery settings.
- Contact genuine support and document the incident.
If the password was reused, replace it everywhere else. Never read a fresh authentication code to someone claiming to investigate the incident.
If a recovery phrase was disclosed
A seed or recovery phrase controls compatible wallet keys. Changing an application password does not invalidate it. Using a trusted, clean device, create a completely new wallet with a new recovery phrase and transfer remaining assets after carefully verifying destinations. Consider professional incident-response help for substantial value.
Do not enter the compromised phrase into “recovery” sites or accept unsolicited help. Assume the old wallet remains unsafe even if no theft is immediately visible.
Layered protection for crypto accounts
- Use unique passwords stored in a reputable password manager.
- Prefer passkeys or hardware security keys where supported.
- Enable withdrawal allowlists and anti-phishing codes.
- Keep long-term assets separate from everyday exchange balances.
- Install apps only from verified publishers and stores.
- Hide SMS previews on a locked screen where appropriate.
- Use a carrier account PIN to reduce SIM-swap risk.
- Keep devices, browsers and wallet software updated.
- Use a VPN on untrusted networks while remembering it does not validate messages.
Frequently asked questions
Can Surfshark block every crypto scam text?
No. Filtering reduces risk but cannot guarantee detection of every new, targeted or obfuscated message.
Does a VPN normally hide SMS messages?
No. Carrier SMS is separate from ordinary internet traffic in the VPN tunnel. Surfshark’s text filtering is a distinct antiscam feature.
Can a real sender name be spoofed?
Yes. A familiar sender label or conversation thread should not replace verification through the official app.
Will an exchange ask for my seed phrase?
A legitimate exchange or wallet support agent should never require a recovery phrase or private key.
Should I call the number in a withdrawal warning?
No. Open the authenticated exchange app and use the support channel published there.
Can I recover a falsely filtered message?
Surfshark says iOS users can review and recover messages placed in Spam. Current behavior depends on platform and app version.
Final takeaway
Crypto scam texts exploit urgency more than technical sophistication. The safest response is to leave the message untouched and verify the claim independently inside the genuine exchange or wallet application. Surfshark Scam Text Protection can add useful early filtering on supported iOS and Android devices, but account controls, secure recovery and careful verification remain necessary.
For current availability, privacy details and setup steps, consult Surfshark’s official Scam Text Protection announcement and its current Help Center.