Be more alert! Check phone messages before responding.

We all know this. We repeat it like a mantra. And yet, there comes a moment when the mantra quietly slips out the back door of our minds—and chaos walks right in.

That moment came to me last week.

I received a text message from the same number that regularly sends me updates from my bank. It read: “Transaction alert: A purchase of ₱18,350.75 was made using your card on April 24, 2026. If you did not authorize this, cancel here…” followed by a link.

Now, nothing sharpens your attention quite like the thought of money mysteriously flying out of your account. I was already on my way home from accompanying a friend to a doctor’s clinic, not exactly in the mood for financial surprises. I hadn’t used my card in weeks—largely because I hardly go out these days—so naturally, I was alarmed.

And then I did exactly what we are all told not to do. I clicked the link.

Up came a very convincing imitation of my bank’s website, complete with official-looking logos and blank fields for account name and password. Ironically, what saved me was not caution—but ignorance. I had no idea what to type. My daughter handles my online banking, partly to prevent errors like this, and partly to keep my occasional shopping impulses in check. At that moment, her system worked beautifully.

My next instinct was to stop by a bank branch along the way, but there was no parking—perhaps a small miracle in disguise. So I called my daughter instead. Without missing a beat, she said, “Don’t click the link.” I admitted I already had, but assured her I hadn’t entered anything.

Still, I wasn’t entirely convinced I had narrowly escaped a scam. After all, the message came from the same thread as legitimate bank alerts—updates about subscriptions, purchases, even promotional offers. It looked authentic because, in every visible way, it was.

Just to be sure, I called the bank. A helpful staff member confirmed what my daughter had said: don’t click suspicious links. Since I hadn’t provided any information, she assured me my account was safe. For extra peace of mind, she tried to direct me to another line to verify transactions, but my mobile signal chose that moment to become philosophical—present, but not really functioning.

Still uneasy, I found another bank branch—this one with parking—and waited (as one does on a Friday) to speak with someone. A kind officer assisted me and confirmed, after proper checks, that no such transaction had occurred.

Relief, at last. But also, a new concern.

I showed her the message thread, pointing out that it came from the same number as legitimate bank notifications. She explained that their number had likely been “hijacked.” Apparently, scammers now have the ability to insert their messages into existing threads, making them appear completely authentic.

So how, exactly, are we supposed to tell what’s real?

The bank’s advice was simple, if a bit unsettling: if there’s a link, don’t click it—it’s not from them. Also, legitimate transaction alerts will include the last four digits of your card. No digits? That’s your red flag waving frantically in your face.

Technology, for all its conveniences, has also become a playground for increasingly creative scammers. What used to be the occasional suspicious email or awkward phone call has evolved into something far more sophisticated—and far more convincing.

A friend of mine who frequently speaks about online scams mentioned that there are even portable devices that can “hijack” legitimate phone numbers, allowing scammers to send messages that appear to come from trusted institutions. They can move around freely, tapping into networks without staying in one place long enough to be easily tracked.

In other words, the scammer is mobile, clever—and counting on you to be distracted.

Which brings us back to that simple advice: be more alert.

Not because we don’t know better—but because sometimes, in a perfectly human moment of worry or distraction, we forget.

And when that happens, it turns out the most dangerous thing isn’t the message. It’s how convincing it is. ([email protected])