Spam messages with malicious links are increasingly being sent via SMS or WhatsApp. How do you block such messages and ensure they don’t install harmful software on your phone unnoticed? Spam messages are less intrusive than spam calls because they are easy to ignore. However, they are no less dangerous. Spam messages are often more dangerous than spam calls because they frequently contain fraudulent links.
What makes this type of message particularly treacherous: they increasingly look "normal". Think of package delivery, a bank notification, a payment request, or a WhatsApp message that supposedly "accidentally" landed in your inbox. Precisely because it looks everyday, people click faster – and that’s what scammers rely on.
Many of these messages are actually smishing: phishing via SMS/WhatsApp.
That’s why blocking spam is not just about one button ("block number"), but about a combination: recognizing, NOT interacting, blocking, reporting, and turning on filters so that suspicious messages are less likely to appear among your normal conversations.
Smishing plays on urgency and trust: a "normal" message tries to lure you to a fake login or payment page.
Smishing is a variant of phishing that you also see in other forms, such as vishing (via phone) and even quishing (via QR codes). It’s useful to have those terms sharp as well: Protect yourself against mobile attacks: vishing and smishing and The evolution of phishing: vishing & quishing.
The good news is that there are many ways to block these messages in the form of smishing and that you can easily protect your phone against malware, viruses, and scammers.
Blocking Spam? First, These 4 Safety Rules
Before you start blocking or turning on notifications/filters, this is the most important: make sure spam doesn’t "work" at all. These four rules prevent one wrong tap from causing immediate damage:
- Never click on links in suspicious messages.
- Do not download attachments that you do not expect.
- Never enter passwords, PIN codes, bank details, or iDIN/DigiD information via a link from an SMS/WhatsApp.
- Unsure? Then open the official app/website (bank, delivery service, government) yourself and check there.
Have you got this sharp? Then you can really tackle spam blocking effectively with settings such as blocking the sender, reporting spam, turning on filters for iPhone, Android, and WhatsApp, and (where necessary) extra security.
If you’re not yet sharp on this and want extra background on how smishing tricks work (and how to recognize them), read this article: Phishing via SMS – how to recognize smishing.
Make Use of a VPN & Antivirus
The most obvious option is to use a VPN and antivirus software. A VPN protects your online privacy and helps you browse more securely (especially in public places and public Wi-Fi). Want to know more about what a VPN is, why you can use the internet more securely with a VPN, and how to use it? A clear explanation of what a VPN is can be found on the ExpressVPN website.
A VPN primarily protects your internet connection (for example, on public Wi-Fi). Think of it as extra privacy and security on the go – not as a spam filter for SMS or WhatsApp.
Antivirus software protects your phone against the unwanted installation of malware and viruses on your phone. There are various providers you can use for this. More background on the role of antivirus in modern security can be found in Cybersecurity in 2025: trends, challenges, and solutions.
Note: a VPN is especially useful for privacy and security on public Wi-Fi, but it is not a "spam filter" for SMS or WhatsApp. Antivirus/anti-malware can be useful as an extra safety net when you do click on something suspicious or download something – think of it as damage limitation, not as the method to stop spam. Are you afraid you’ve downloaded something? Then this can help: Quickly removing malware is how you do it.
A simple basic step that many people forget when blocking spam: update your phone. iOS and Android updates contain security patches that make abuse more difficult.
Now for the most important part: the practical steps to block and report spam messages and phone numbers so that your inbox becomes calmer again.
Blocking Spam Messages
It is important not to interact with the sender of the message. So do not respond or click on links. If you click on this, malware can be installed or you may be redirected to untrusted websites.
If you respond to spam messages, your phone number will be forwarded to more scammers, and the chance of receiving even more spam messages increases.
Extra practical rule when blocking spam: do not respond with "STOP", "unsubscribe" or something similar if you do not fully trust the sender. In cases of fraud, this sometimes confirms that your number is active.
And one more that often goes wrong: do not "check" by calling back or replying. That is also interaction.
Spam messages often play on urgency ("click here", "error", "blocked"). Recognizing these messages, not responding, and immediately blocking or reporting prevents you from falling for such a trick.
Note: spam does not only come in 1-on-1. Scammers increasingly use group chats to appear more credible.
Blocking Spam Messages in Group Chats via SMS/RCS (Google Messages)
Scammers increasingly use group chats in the SMS/Messages app (often via RCS chats, the modern successor to SMS, but sometimes in "SMS groups") to appear credible. You might see a "package message" or tracking code, and because you are in a group, it feels like it’s "legit". That’s why it’s important not to respond, not to click, but to report the group as spam immediately and then leave. There are two routes for this:
Route 1: quickly report spam via ⋮ (three dots)
- Open the group chat.
- Tap on ⋮ in the top right corner.
- Tap on Report Spam.
- Confirm in the pop-up with Yes.
What happens next may vary by device/version: in any case, you will receive fewer/no notifications from that chat. Sometimes it is also separated (but don’t count on that 100%):
Via the menu (⋮) in the group chat, you can report the entire chat as spam at once. You will then see a confirmation ("Report as spam?"), click on 'Yes' to report the group chat as spam.
You can undo the spam report by clicking on 'not spam' if it turns out to be legitimate. However, it is important that if it is spam, you still manually leave the group after reporting the spam. This brings us to route 2:
Route 2: via Group Information (here you can also leave the group)
Sometimes you want to leave the group immediately after reporting spam, or you only see the "leave" option in the group screen.
- Open the group chat and go to Group Information (e.g., via the group name/icon or via the menu).
- First choose Report Spam, then you will see the same pop-up as in route 1.
- Then choose Leave Group (so you are really out).
In the Group Information menu, you will often find extra options next to "Report Spam", such as "Leave Group". Handy if you want to step out of the group immediately after reporting.
Tip: then delete the conversation from your list (just for tidying up), so you don’t accidentally click on a link in that chat later.
Have you reported and left the group? Then you can also block individual senders and phone numbers, so you receive messages from the same number less often.
Block the Phone Number
You can block numbers from which unsolicited messages are sent. The downside of this approach is that spammers usually change their phone number. This way, even if you block the number, you can still receive messages from the same spammer with a different number. Blocking a phone number on your iPhone or Android device works as follows:
Block Phone Number on iPhone
On an iPhone, open the SMS message you received. Tap on the phone number at the top of the screen and then tap on the Info button. Select Block this Caller in the next screen and then tap Block Contact to confirm.
Tip (iPhone): screen/filter unknown senders. This way, unknowns won’t come between your normal conversations (and the chance is smaller that you accidentally tap on a link).
- Tap in Messages on Filters → Manage Filtering (names may vary slightly by iOS/language) and turn on 'Screen/Filter Unknown Senders'.
- Also check the 'Spam' or 'unknown senders' folder/section: suspicious messages may automatically end up there.
- Do you see 'Report Junk' in iMessage? Use that option and then delete the conversation.
Want the official instructions and steps? Apple explains this in View and Restore Spam Messages on Your iPhone.
Block Phone Number on Android
On an Android phone, open the text in SMS messages and tap on the three dots (⋮) icon in the top right corner. The steps then vary based on your phone and OS version. Select the option 'Block Number' or 'block contact' or select Details and then tap 'Block and report spam'. In some cases, you can click on 'block and report spam' directly after the three dots icon.
Preferably choose 'Block and report spam': then the conversation often disappears directly to 'Spam and Blocked' and you help the filter recognize better. There you also have a menu to share the recent messages from the sender with Google and mobile providers to limit spam:
This pop-up screen appears after you choose 'Block and report spam'. Leave 'Report Spam' checked and tap Yes to block the number and (optionally) send recent messages for spam detection.
Want the official steps? Google explains here how 'Block and report spam in Google Messages' works, although it’s a bit more implicit.
Another option on Android phones is to click on the info button next to the number and/or contact. Then click on the icon with the three dots (⋮) at the bottom right or top left and click on block contact:
You can also block a sender via the contact card: open the card via the name or number and choose the option Block Contact via the menu. This also works if you are not in the chat menu.
Then it says: "block contact? You will no longer receive calls or messages from this contact." Click on block. The spam will not be reported then, but you will not receive any spam or contact attempts anymore.
In addition to phone numbers and groups via SMS/RCS, you can of course also block and report in WhatsApp – there are even extra anti-spam settings in there.
Block Phone Number on WhatsApp
Open the WhatsApp app on your phone, go to settings and then click on 'Privacy', go to 'contacts' and then click on 'blocked contacts'. Then tap on the 👤+ icon and select the contact and/or number to block that person.
In WhatsApp, you add a block via Blocked Contacts. Tap the 👤+ icon in the top right to add a number/contact to your block list.
There is also an alternative way to block via WhatsApp, this is faster and clearer than via settings and menus: open the chat → press the three vertical dots (⋮) → press 'more' → press block. Do you also see "Report" or "Report", use that immediately. This reporting often applies to the last five messages that are then reported to WhatsApp.
When blocking within the chat, you can also report directly: with 'Report to WhatsApp' you send the last messages along, so that WhatsApp can intervene faster. Then confirm with Block.
Do you want to tighten your WhatsApp settings right after (privacy, notifications, groups, practical shortcuts, etc.)? Then this overview helps: With these tips, you become a WhatsApp pro.
Extra WhatsApp Tip Against Spam
Go to Settings → Privacy → Groups and set 'Who can add me to groups' to 'My contacts' (or 'My contacts, except...'). This prevents a lot of group spam and unknown invitations. You can also impose these restrictions on who can see your last seen or profile picture.
Prevent group spam by limiting group invitations: set Who can add me to groups to My contacts (or My contacts, except...).
Tip: then delete the conversation, so you don’t accidentally click on the link that is in the chat later.
If you want to check the official WhatsApp explanation about blocking, click here: WhatsApp: Block and Report Someone.
Why Blocking Sometimes "Doesn’t Work":
- Spammers change numbers
- Sometimes they use sender names or "spoofing" (it looks like a known company, but it isn’t)
That’s why blocking spam works best when you combine blocking with reporting/filters (see below).
Disabling Spam Messages (via Reporting/Filters)
On an Android phone, you can sometimes directly disable all possible spam messages via the Messages app from Google. Tap on the three dots icon in the top right corner of the app and select Settings > Spam Protection and turn on the Spam Protection switch. Your phone will now warn you if an incoming message is suspected of spam.
Can’t figure it out? In Google Messages, it’s usually: Open Messages → click on your own profile picture or ⋮ → Message settings → Protection and Security → Spam Protection or Security against Spam → make sure this is checked or enabled. (names may vary slightly by device/Android version).
Here in Google messages, you turn on spam protection. If this is active, the Messages app can give warnings for suspicious messages and possible scams.
Is this already on? Great – just check it, because factory settings can vary by device/Android version and this is not always activated automatically.
In iOS, you can filter messages from unknown senders into a separate folder in the Messages app. Activate it via Settings > Messages > Filter Unknown Senders.
This is one of the biggest gains in spam blocking in practice, as you not only stop individual numbers but also use pattern recognition/filters.
This is how it works in practice:
- Android (Google Messages): spam recognition can automatically move or mark suspicious messages as spam.
- iPhone (Filter Unknown Senders): spam doesn’t always disappear, but it is separated from your "normal" inbox, making it less likely that you click incorrectly.
Another useful habit: set notifications for unknown senders to be less prominent (or off) if you find that you are often tempted to check immediately. That’s not magic, but it helps reduce reflex behavior.
Secure Your Phone
Even with the greatest care, malicious messages can be missed or mistaken for legitimate messages. This need not be a problem if your phone protects you with software designed to protect you from malware, scammers, and viruses. There are simple ways to protect your phone. Here are a few tips.
There are various apps in the App Store or Google Play Store to protect you from unwanted messages and calls. However, experiences vary and prices vary significantly. A quick search often offers multiple choices, but read the reviews carefully.
Want to tighten your basic mobile security right away? Then this is a nice checklist: 10 mobile security tips for your smartphone.
We always recommend applying a combination of the above methods to minimize unwanted messages!
Finally (for extra security)
- Enable two-factor authentication (2FA) on important accounts where possible.
- Install apps preferably only from the official stores (App Store/Google Play).
- Make backups so that you can recover faster in case of trouble.
And: what if you did click?
Then here are a few practical steps you can take:
- Close the page immediately and download nothing.
- Did you enter any data somewhere? Change your password immediately (and enable 2FA).
- Check bank/transfers if it was about payment fraud.
- Check if there are no unknown apps/profiles or "admin" rights added.
Acting quickly is more important than "panicking" here. If you doubt whether you are dealing with phishing (via SMS/WhatsApp/QR/phone), you can check this page from the government: What can I do against phishing?
In summary: blocking spam works best if you (1) turn on filters, (2) block and report senders, (3) do not interact with suspicious messages, and (4) keep your basic security in order.
