The way this text scam works is to get victims to click on an attached link, which sends them to a form asking them to enter personal information (like bank account info) in order to receive a non-existent package. This doesn’t just give fraudsters access to sensitive information, Nofziger says. In many instances, identity thieves use this trick to download malware onto your phone, which can lead to all sorts of unpleasant consequences, including, "stealing [additional] personal information off your device, or having your phone send out revenue-generating SMS messages,” she says. In a worst-case scenario, “It can even have the criminals lock your device and demand a ransom payment,” Nofziger says.