I know i've said it before, but if you are concerned it could be real and not a scam, the best way to avoid getting scammed is to return contact separately.
say you get a text from your internet provider, let's say it's Comcast (whom i hate). So you have this text that says it's from Comcast about your bill with a contact number and a clickable link -- could be real, could be a scam.
Don't touch anything about this text. Open a web browser and look up the customer service number for Comcast. Or get the number from the bill they send you. However you do it, get the contact info for Comcast from a trusted source, like an official phone directory or the Comcast website itself.
Get in touch with them using that information.
So. Let's run the example both ways it could go.
If it IS a scam: you reach out to Comcast and tell them you were contacted about a problem with your bill, they look you up in their customer database, and they tell you there is no problem with your bill.
If it's NOT a scam, you do the same thing, they look you up, and they explain the problem. In this case, neither Comcast nor the employees involved give a single shit whether or not you clicked the link in the text vs. going through their official website.
This works the same for the your bank, the IRS, Amazon, political causes, charities, everything.
By handling any questionable incoming calls to action this way, you significantly protect yourself from scams and malware and shit
