How to spot and report scam phone calls and texts at UK

University of Kentucky students, faculty and staff have reported receiving phone calls and text messages impersonating law enforcement, courts and university executives that attempt to solicit money and gain access to personal protected information.

Text impersonation attacks like these that have circulated across UK, Cybersecurity Notification: Text Impersonation Attacks | Information Technology Services, often come from unknown numbers.

The increasing use of AI, which can mimic seemingly legitimate phone calls and text messages, makes these scams more common and difficult to identify. In 2025, the FBI reported Americans lost approximately $893 million due to AI scams: A.I. Is Making Scams Hard to Spot. Here’s How to Protect Yourself. - The New York Times

Despite the sense of urgency created by these types of phone calls and texts, stopping to ask a few questions can prevent scams like these from compromising university data and costing you time and money.

First and foremost, police departments and courts will never call you asking for money to avoid potential legal action.

"These scams are designed to scare people into making quick decisions,” UK Police Department (UKPD) Chief Joe Monroe said. "We want our community to remember one simple rule: Law enforcement will never call and tell you to send money to avoid arrest, and we will not demand payment over the phone for a warrant. If you receive a call like that, treat it as a scam and report it to UKPD or your local law enforcement agency."

Scammers also often impersonate government agencies. Last year, text impersonation scams claiming to be the Kentucky Transportation Cabinet, linked to web addresses that looked like official government websites, tricked users into paying bogus toll charges. Beware of scam texts impersonating Kentucky government agencies | Information Technology Services

“It is important to report emails or texts impersonating university officials, so that ITS is aware of any potential cybercrime efforts that involve the university,” Stephen Burr, UK ITS chief information security officer and deputy CIO, said. “If you are unsure if emails or texts are phishing attempts, reporting them doesn’t cause any harm.”

Although UK students, faculty and staff have reported phone calls and text message scams, no university data has been compromised.

What is the best response to these attacks?
For attacks that come to your mobile device directly via text, UK ITS recommends reporting them via the text reporting tools on your phone or by copying the message and forward it to 7726 (SPAM). This helps your wireless provider spot and block similar messages in the future. Additionally, these attacks should be reported to the FTC via ReportFraud.ftc.gov. More information on how to report these attacks are available on the FTC's website at How To Report Spam Text Messages.

For attacks that are delivered via text to your university email account, please use the Report Message button. See How do I report spam and phishing emails? for more information. 

Here are a few things to remember when receiving urgent unknown phone calls or texts:  

• Police departments and courts will not call you asking for money to avoid arrest. 

• University executives will not text you with a sense of urgency asking for a favor. If you normally communicate with a university official and they contact you from an unknown number, reach out to that person directly through your usual communication channels.  

• Do not respond with personal information to unknown numbers.  

• Do not click on links in emails or text messages you were not expecting to receive. 

• Read more about reporting spam and phishing emails: Public - How do I report spam and phishing emails? 

• Know how to report spam text messages: How to Recognize and Report Spam Text Messages | Consumer Advice