Short answer: no, a name displayed instead of a number proves nothing. That field — the alphanumeric sender ID (or sender ID) — is simply a string of characters declared by whoever sends the message, then carried as-is by the networks. A scammer using a lax bulk-messaging platform can type "AMELI", "COLISSIMO" or "ORANGE". What matters is the content, the link and the verification done outside the text message.
Updated 8 November 2026.
This is one of the most widespread reflexes, and one of the costliest. A message arrives, and at the top there's no unknown mobile number, no five-digit short code: just a name, in capitals, belonging to a government body or a brand you know. Your brain files it away instantly: this really is from them — a number can be faked, a name can't.
The intuition is exactly backwards. A French short code is assigned, and therefore traceable. A sender name, on the other hand, is usually nothing more than a parameter to fill in on a sending interface. Understanding that difference means taking back control over half the suspicious texts you receive.
What exactly is an alphanumeric sender ID?
It's the "sender" field of a text message filled in with letters instead of a number. Technically, the GSM standard allows up to 11 characters in that field (letters, digits, sometimes a hyphen or a full stop depending on the routes used). Hence the truncated names you often see: "COLISSIMO", "SNCF", "MYACCOUNT", "DELIVERY".
This format is reserved for so-called A2P traffic (application-to-person): messages sent from a computer system to a mobile phone, via an aggregator that injects the traffic into the carriers' networks. Two properties follow from this, and they explain almost everything:
- You can't reply. An alphanumeric sender ID is not a number: there is no return route. If your app shows a text input box, your reply goes nowhere — which is itself a useful clue.
- You can't call it back, and you can't block it for long. Blocking "PARCEL-INFO" on your phone is possible on iOS and Android, but the next campaign will use "INFO-PARCEL" or "TRACK24". We covered that limitation in our article on what blocking a number actually stops.
Why do companies use it?
For readability and open rates. A text signed with a name is opened more often than a message from an unknown number, and it groups all of a brand's notifications into a single thread. It is precisely this convenience that fraudulent campaigns hijack.
Is that name checked by anyone in France?
Partly — and that's the whole nuance. France has no mandatory public register of SMS sender names comparable to the Arcep numbering plan for phone numbers. Checks rely on the contractual chain: the aggregator verifies (or doesn't) that its customer is entitled to use a given name, then the carrier accepts (or doesn't) the traffic.
For several years now, French carriers and the AF2M (Association française du multimédia mobile, the body coordinating professional SMS practices and the 33700 scheme) have tightened those filters, notably through lists of sensitive names: banking brands, public bodies, delivery companies. But three gaps remain:
| Link in the chain | Who checks what | Weakness exploited |
|---|---|---|
| Customer company | Declares the name it wants to use | Self-declaration, sometimes flimsy paperwork |
| Aggregator / platform | Checks the legitimacy of the name | Highly variable quality, especially outside the EU |
| Destination carrier | Filters incoming traffic | Only "sees" what the route passes on |
Fraudulent campaigns that get through almost always travel over a poorly filtered international route, or come from a customer account opened with forged documents on a foreign platform. In that case, the displayed name has passed through no serious check at all.
Rule to remember: a short code starting with 3xxxx, 2xxxx or 6xxxx has an identifiable holder; a sender name carries no guarantee of origin whatsoever. To understand the short-code ranges, see our reference page on SMS short codes.
Why does the fake message land in the genuine conversation?
Because your phone groups messages by sender character string, not by verified identity. If your genuine messages come from "MY-BANK" and a scammer sends from exactly "MY-BANK", both land in the same thread, one after the other.
That's the most devastating effect of the technique: the fraudulent text inherits the credibility of the entire history above it — your real one-time codes, your real balance alerts. The mechanism is the same as the one described in our analysis of sender spoofing inside your bank's message thread.
Three practical consequences:
- Never judge a text by its neighbours. Each message has to stand on its own.
- An "official" thread can contain a fraudulent message, and conversely a genuine message can arrive from a number you don't recognise (a subcontractor, a new service provider).
- Screenshots don't settle the doubt: they show the name, and therefore nothing.
How do you verify a text signed with a brand name?
By stepping outside the message. Four checks are enough in almost every case, and they take less than a minute.
1. Read the link, not the link text
In a text message, the address is written out in plain sight: you can read it without tapping it. Look only at what comes before the first /: that's the real domain. ameli-remboursement-fr.net is not ameli.fr; colis-suivi.app/laposte is not La Poste.
Be especially wary of:
- domains ending in
.top,.icu,.sbs,.cfd, heavily used by smishing campaigns; - link shorteners (
bit.ly,cutt.ly): a French public body has no reason to hide its address; - misleading subdomains: in
impots.gouv.fr.paiement-secure.com, the actual site ispaiement-secure.com.
2. Ask yourself what the message wants you to do
Legitimate texts signed with a brand name inform: a parcel at a pickup point, an appointment confirmed, a one-time code. Fraudulent texts demand urgent action: pay a few euros, "update" a file, "confirm" bank details, call a number back.
A French government body never asks for payment via a link in a text message, nor for a card number, nor for a code received by SMS. It's stated in black and white on cybermalveillance.gouv.fr and repeated by the national health insurance fund on ameli.fr.
3. Check through a channel you chose yourself
Open the app yourself, or type the address by hand. For a parcel, take the tracking number from the retailer's order confirmation, not from the text message. For a refund, log in to your account. If the information really exists, it will be there; if it isn't, the text was fake.
For phones where this routine is awkward — screen too small, text hard to read — simply having an adjustable desk phone stand within reach and putting your glasses on before reading a link genuinely changes the error rate. A lot of regretted taps are taps made standing up, in the street, in ten seconds.
4. If doubt persists, report it and don't delete it straight away
Forward the message to 33700 (a free service run with the carriers and the AF2M). You'll get a reply asking for the number or the sender name, which you should forward too. Our article on what happens to your 33700 report explains the rest of the procedure.
What clues point to a genuine business message?
No single clue is absolute proof, but together they're reliable. Here's what stands out when you compare legitimate sends with fraudulent campaigns.
| Clue | Legitimate message | Fraudulent campaign |
|---|---|---|
| Displayed name | Stable over time, spelled exactly right | Variants, hyphens, added digits |
| Link | Brand's own domain, .fr or a known domain | Lookalike but different domain, unusual extension |
| Personal data | Name, order or case reference that add up | "Dear customer", or conversely accurate data stolen elsewhere |
| Request | Inform, confirm, offer a time slot | Pay, enter a card, share a code |
| STOP notice | Present for marketing messages | Absent, or a "stop" link leading to the same site |
| Timing | Business hours, never Sunday for advertising | Night-time, weekends, public holidays |
Watch out for the reverse trap: a lack of personalisation isn't a sufficient criterion, and the presence of your personal data is no badge of authenticity. Scammers buy databases from leaks: they may know your name, your address and sometimes your order. We documented this in the article on delivery texts that know your address.
Can you block or filter an alphanumeric sender ID?
Yes, but with poor returns. The tools available in 2026:
- iOS: in Messages, open the conversation → name at the top → Info → Block this Caller. Also turn on Settings → Apps → Messages → Filter Unknown Senders, which moves messages from senders not in your contacts into a separate tab.
- Android / Google Messages: long-press the conversation → Block → tick Report spam. And in Settings → Spam protection, check that detection is switched on.
- On the carrier side: the network anti-spam filters run by Orange, SFR, Bouygues Telecom and Free Mobile work on routes and URLs, not on your personal list. And they improve precisely thanks to 33700 reports.
Blocking therefore remains useful hygiene, but a purely local one. The real drop in volume comes from elsewhere: limiting how widely your number circulates, and keeping uses separate — an approach we develop in the second-number method.
For anyone who wants to keep a written record of the fraudulent messages they receive — handy if you file a complaint — an A5 lined notebook kept next to the phone, in which you jot down the date, the displayed name and the amount requested, is still more reliable than searching through three thousand texts six months later.
What if I've already clicked or entered information?
Act in order, without panicking:
- Stop entering anything and close the page. Simply loading a page without typing anything is, in the vast majority of cases, harmless in itself.
- If you entered login credentials: change the relevant password immediately, from the official app, and switch on two-factor authentication.
- If you entered a bank card: report it to your bank and ask for the card to be blocked. Unauthorised payments are covered by Articles L133-18 et seq. of the French Monetary and Financial Code, available on Légifrance.
- If you passed on a code received by SMS: treat the account as compromised and alert the organisation concerned.
- File a complaint and report it on the Interior Ministry's Thésée platform if you've suffered a financial loss.
The step-by-step timeline is set out in the 72 hours after a booby-trapped text.
A word on hardware prevention, often overlooked: a FIDO2 security key for your most sensitive accounts (main email, carrier account) strips any intercepted SMS code of its value, since validation no longer goes through a message. It's one of the few defences that holds up against a scammer who already has your number.
Key takeaways
- A name displayed instead of a number is self-declared, not certified: it offers no guarantee of identity.
- A French short code, by contrast, has an identifiable holder: that's a far better starting point for identification.
- A fake message can appear inside the genuine thread from your bank or your courier: judge each message on its own.
- The only check that holds up happens outside the text message: the official app, an address typed by hand, an official number you found yourself.
- Report to 33700: it's free, and it's what feeds the network filters.
To go further on identifying an unknown sender, our guide Where did this text come from? sets out the full method, covering short codes, sender names and unknown +33 numbers.
Frequently asked questions
Why can't I reply to a text signed with a name? Because an alphanumeric sender ID isn't a phone line: there's no return route. Companies that expect a reply use a short code (3xxxx, 2xxxx) or a dedicated mobile number.
Can a text really display my bank's exact name? Yes. Since the sender field is just text, a fraudulent campaign routed through a poorly filtered path can copy the name your bank uses character for character — and the message then slots into the existing conversation.
Does a text containing my name and address prove it's genuine? No. That data circulates after leaks and resold files. A highly personalised message can be entirely fraudulent, and an impersonal one can be legitimate.
Who controls SMS sender names in France? There is no mandatory public register. Control is contractual, split between the customer company, the aggregator and the destination carrier; the AF2M and the carriers maintain lists of sensitive names, but international routes remain a weak point.
Should I delete the fraudulent text after reporting it? You can delete it once you've forwarded it to 33700, unless you've suffered a loss: in that case, keep a full screenshot (displayed name, date, content, link) for your complaint.
