Short answer: your mobile operator does indeed have the right to send you text messages — usage tracking, end of commitment period, tariff changes, commercial offers. These messages come from a French short code (3xxxx/2xxxx type) or an alphanumeric sender ID ("ORANGE", "SFR", "Free Mobile"), never ask for your bank card details via a link, and always carry a STOP opt-out notice on the advertising portion. The moment an "operator" text demands a settlement payment, an update to your bank details or your login credentials, it's a scam: don't click, forward it to 33700.
Updated 24 October 2026.
This is probably the category of text message you receive most often without ever paying attention to it. Your operator writes to you about a data overage, about an available bill, to offer you a new phone, to remind you that your commitment period ends in two months. Three messages a week, sometimes more if you have a broadband box, several lines and a TV subscription.
That very ordinariness is exactly the weakness scammers exploit. A fake "Orange" or "SFR" text doesn't need to be spectacular: it just has to look like the hundred others you've already received. And since everybody has an operator, the "right target" rate is close to 100% — unlike a fake bank text, which nine times out of ten lands on a customer of a different bank.
What text messages does your operator actually send you?
Three families need to be distinguished, and they don't follow the same rules.
1. Mandatory or contractual information texts. These don't count as advertising and you can't opt out of them as long as you're a customer:
- usage alerts (data allowance exhausted, out-of-plan charges, use abroad);
- bill availability, direct debit failure;
- notice of a change to the contractual terms: article L. 224-33 of the French Consumer Code requires the operator to inform you at least one month before the change takes effect and to remind you of your right to cancel free of charge for four months;
- technical information (maintenance, local outage, migration to a new technology).
2. Service texts linked to an action you took. A verification code to access your customer account, confirmation of a phone order, SIM or eSIM delivery tracking, number portability confirmation with your RIO code. These messages are triggered by you, within a minute or so.
3. Commercial texts. Contract renewal offers, smartphone promotions, broadband box proposals, plan upgrades, add-on services. These are direct marketing and fall under article L. 34-5 of the French Postal and Electronic Communications Code: for an existing customer, the operator may approach you about similar products without prior consent, but it must give you a simple, free way to refuse. Hence the STOP notice at the end of the message.
Useful marker: a legitimate operator text directs you to your customer account area or to a store, never to a direct payment form reached through a shortened link.
How do you recognise a fake operator text?
By looking at three things: the sender, the request, and the link's domain.
The sender
French operators use short codes allocated under the framework defined by Arcep and coordinated by the AF2M, or registered alphanumeric sender IDs. An informational or promotional text from Orange, SFR, Bouygues Telecom or Free Mobile practically never arrives from an 06 or 07 number. If "SFR" writes to you from an ordinary mobile number, it's a fake in virtually every case.
One caveat, though: the alphanumeric sender ID can be spoofed. A scammer can make "ORANGE" appear, and the message may even slot into the thread containing your genuine messages. That's the spoofing mechanism, which we detail in our article on the fraudulent text that appears inside your bank's real conversation thread. The sender is therefore a clue, not proof.
Since 1 October 2026, the number authentication scheme provided for by the law of 9 June 2023 on regulating telephone canvassing (known as the Naegelen law) also applies to mobile calls; it does not, however, cover all texts sent with a branded sender ID. In other words: the rules are tightening on the call side, but vigilance is still needed with text messages.
The request
A genuine operator will never ask you by text:
- to "settle" a bill of a few euros via a link within the hour;
- to update your bank details or your card by clicking;
- for your customer account credentials or a code received by text;
- for your PUK code, your SIM code or your full RIO number;
- to install an app from a link outside the App Store or Google Play.
Small amounts — €1.99, €3.50, €8.40 — are a strong signal. They exist to obtain your card number under a harmless-looking pretext, not to collect the sum stated.
The link's domain
This is the most reliable test. Before clicking, read the root domain: whatever comes immediately before the first /. A genuine operator link ends with an official domain (orange.fr, sfr.fr, bouyguestelecom.fr, free.fr, mobile.free.fr). A fake one adds words before or after: orange-facture-client.xyz, sfr-paiement.secure-fr.com. Subdomains are the classic trick: orange.fr.verification-compte.net has nothing to do with Orange.
If you struggle to read small print, an adjustable phone stand for your desk that raises the screen to eye level genuinely changes how well you spot a dodgy URL — far more than any piece of advice about staying vigilant.
Table: genuine operator message or scam?
| Element | Genuine operator text | Fraudulent text |
|---|---|---|
| Sender | 3xxxx/2xxxx short code or registered brand name | 06/07, foreign number, or spoofed brand |
| Subject | Usage, bill available, offer, end of commitment | Urgent arrears, refund, "account suspended" |
| Urgency | No deadline measured in hours | "within 24 hrs", "before tonight", "final reminder" |
| Link | Operator's official domain or customer account area | Shortened link, lookalike domain, booby-trapped subdomain |
| Data requested | None, or sign-in to the customer account area | Bank card, bank details, credentials, code received by text |
| STOP notice | Present on every advertising message | Absent, or pointing to an unknown number |
| Spelling | Formatted message, sometimes terse, but correct | Missing accents, spaces before punctuation |
Why do you get so many texts when your commitment period ends?
Because the end of the commitment period is the moment the operator genuinely risks losing you, and it knows the date to the week.
A plan with a subsidised handset usually comes with a 12- or 24-month commitment period. As the end date approaches, your file enters what's known as a retention campaign: texts, calls, emails, banners in your customer account area. Renewal offers are often real and sometimes attractive, but they start a new commitment period.
Three points to bear in mind:
- The Chatel law (article L. 224-28 of the French Consumer Code) regulates 24-month commitments: from the 13th month onwards, you can cancel by paying only a fraction — at most a quarter — of the remaining monthly instalments.
- Number portability is done using your RIO code, obtained by calling 3179 (free service); the new operator handles the cancellation with the old one.
- A text telling you that "your line will be suspended unless you renew" is a fake. The end of a commitment period suspends nothing: your plan continues, simply without a commitment.
This window is also when scammers strike, because the pretext becomes credible. A fake text saying "your €120 loyalty offer expires tonight" works all the better because you've received three genuine proposals that same week.
How do you stop your operator's marketing texts?
There are three levels of action, from the quickest to the most thorough.
- Reply STOP to the number given in the message. This is the standard channel, free or charged at the price of a normal text, never premium-rate. It shuts down the campaign concerned. We explain exactly how it works and where its limits lie in our guide to replying STOP to an advertising text.
- Turn off marketing in your customer account area. With all four operators, the section exists under a heading along the lines of "My contact preferences", "Privacy" or "Managing my data". Untick texts, email, calls and, where applicable, "sharing with partners" separately — that last box is the one that feeds approaches coming from elsewhere.
- Exercise your GDPR right to object. In writing, to the operator's data protection officer. The company has one month to reply. If there's no reply, filing an online complaint with the CNIL is free and takes a few minutes.
What these steps won't cut off: contractual information texts and usage tracking messages. That's normal — they don't count as advertising.
If you're getting texts from operators you aren't a customer of, the problem lies elsewhere: your number is circulating. We've set out the mechanics in our article on the reasons your mobile receives so many fraudulent texts. One simple practice is to keep your main number for family, friends and sensitive services, and to use a second line — a pay-as-you-go SIM card with no contract will do — for forms, sign-ups and prize draws.
What to do if you clicked on a fake operator text
Act in order, without waiting to see whether "something happens".
- If you entered your bank card details: block the card immediately (banking app, then your bank's emergency number or the interbank hotline 0 892 705 705).
- If you gave away your customer account credentials: change the password from the app or from the official site typed in by hand, then enable two-factor authentication. Access to the customer account area is a doorway to ordering an eSIM: that's the start of SIM swapping.
- Check that no call or text forwarding has been activated on your line, and that no paid option has been taken out.
- Keep the evidence: a screenshot of the message with the sender visible, plus date and time.
- Report it: forward the text to 33700 (free service, run by the operators and the AF2M) or report it at signal-spam.fr and cybermalveillance.gouv.fr.
- File a complaint if you've suffered financial loss, at a police station, a gendarmerie or via the French Interior Ministry's THESEE platform.
For the detailed steps and the deadlines for challenging bank transactions, our guide to the 72 hours after falling for a text scam covers every procedure. And if you want to know what actually becomes of your report, we've documented it in this article on the journey of a report to 33700.
One often-overlooked detail: scam texts are rarely one-offs. Once your number has been confirmed as "active", it circulates. Writing down in a paper password notebook which accounts use which number and which email address may look outdated, but it's what lets you know, the day a leak happens, what to change first.
Special cases worth knowing about
Free Mobile's 2030. Many subscribers receive texts from the number 2030 and wonder about it. This type of short code is used for the operator's communications to its subscribers; if you have any doubt about the content of a message received, the reflex remains the same: don't click, and check directly in your subscriber account area.
Texts after a number port. Switching operator triggers a burst of messages: RIO confirmation, switchover date, SIM activation, then "win-back" campaigns from your former operator. This sequence is normal. What isn't: a text demanding a payment to "finalise the port". Number portability is free.
Partner texts. Some approaches come from intermediaries that acquired your number via a ticked box. They're legal if consent exists, but they must identify the actual advertiser. An anonymous advertising message, with no company name and no valid STOP notice, is already in breach of the rules.
Queue-jumpers and fake customer support. After a tweet or a negative review about an operator, some fraudulent accounts contact disgruntled customers while posing as customer service. Genuine customer support asks for neither bank card details nor a code received by text.
To go further on identifying an unknown sender, our guide Where does this text come from? explains how to decode a short code, an alphanumeric sender ID or an unfamiliar +33 number. And if you want to check what a specific numbering range corresponds to, the site's short codes page lists uses by family.
FAQ
Can my operator send me advertising texts without my agreement?
Yes, up to a point: as a customer, you may be approached about products or services similar to those you already have, without prior consent, provided you're offered a simple and free way to refuse (article L. 34-5 of the CPCE). For offers outside that scope, or for partners, your consent is required.
Can a text from my operator be premium-rate?
No. Receiving a text costs nothing in France. And replying STOP to an advertising campaign is charged at the price of a normal text, included in virtually every plan — never at a premium-rate service price.
How can I check whether a text from Orange, SFR, Bouygues or Free is genuine?
Don't click on any link: open the official app yourself or type the site address by hand, and check whether the information appears in your customer account area (bill, offer, incident). If it isn't there, the text is fake.
What should I do if I'm asked to pay a small outstanding amount by text?
Ignore the link. Check your bill in your customer account area: a genuine payment incident will show up there, along with how to settle it. Then forward the text to 33700 to report it.
Has replying STOP flagged me as an active number?
For a legitimate campaign from an identifiable company on a French short code, no: that's the channel provided for by law. On the other hand, never reply STOP to a scam text or one coming from an unknown 06/07 number: there, any reply confirms the line is in use.
