The Results Are In. The Scam Texts Just Started: How Results Night Turns Your Inbox Into a Target

Polls close, and most people think the election story is over for the night. It is not. The second story starts the minute results start moving: your phone lights up with alerts, forwards from relatives, texts from numbers you do not recognise, and emails claiming the outcome just changed. Some of that is real news travelling fast. Some of it is bait, written by people who know you are refreshing, tired, and emotionally invested — which is exactly when you are most likely to tap first and check later.

Earlier today I wrote about the voting-day side of this problem. Tonight is the other half. Results night has its own scams, its own urgency tricks, and its own version of "verify now or lose your vote." If you understand the four messages below, you can enjoy the results without handing your inbox, your password, or your card to someone who was waiting for this evening all along.

What tonight actually looked like in Georgia

Georgia is the right place to anchor this, because it is where search interest and real events collided tonight. Google Trends in the United States put "election results georgia" at number 7 in its latest list, alongside "vermont election results" at number 10 — millions of people were not just watching results, they were searching for them, which means they were also clicking whatever promised the fastest update.

On the ground, Georgia polls closed at 7:02 p.m. ET, with more than one million ballots cast on Election Day alone, according to live reporting from the Savannah Morning News. NBC News and Decision Desk HQ projected Jon Ossoff would hold his Senate seat. Those are the kinds of solid, checkable facts a real results alert contains: a named race, a named source, and a number you can cross-check somewhere else.

But the warning signs started before the polls even closed. Around 11 a.m., Fulton County said some voters had received texts about polling place changes that the county did not send, and told voters to verify their polling place themselves at mvp.sos.ga.gov or by calling (404) 612-7020. That is the pattern for the whole night in miniature: an official-sounding message, a plausible instruction, and a link or number that does not belong to the office it claims to be. By evening, the same trick simply changes costume — from "your polling place moved" to "the results changed, click here."

The four results-night messages to delete on sight

These four arrive in every close election, and they all exploit the same gap: you want the newest information, and the scammer is happy to be the fastest source in your inbox.

1. The "results just changed" alert. Subject lines like "BREAKING: Georgia results flipped" or "Recount ordered — see the new totals" link to a page that looks like a news site but exists to harvest clicks, logins, or ad revenue. Real results move in small, sourced steps: a county reports, a network calls a race, a margin narrows. A message that claims a total reversal with no county, no source, and one big red button is not news. It is a lure.

2. The ballot-cure text. This one is crueller because it targets people who voted by mail. It says your ballot was rejected over a signature mismatch and you must "cure" it by clicking a link and confirming personal details. Real ballot curing exists — about two-thirds of states require officials to notify voters of a missing or mismatched signature and give them a chance to fix it, according to the National Conference of State Legislatures — but the fix runs through your official state or county election office, never through a link in an unsolicited text. If you voted by mail, check your ballot status on the official tracker you find yourself, by typing the address in. Do not follow the one that found you.

3. The recount donation rush. "We need $25 before midnight to fund the recount" is effective because it feels civic rather than criminal. Campaigns do raise money after elections, but a legitimate fundraising message comes from a sender you already know, links to a domain you recognise, and does not threaten that your vote disappears if you do not pay in the next hour. A recount is a legal process run by election officials, not a crowdfunding deadline in your text messages. When in doubt, go to the campaign or party site directly and donate there — or do not donate at all tonight.

4. The zombie registration message. The Better Business Bureau warned on November 2 about election-season messages urging people to "text your vote," which is simply not how voting works in the United States, alongside fake campaign emails asking recipients to click through to surveys, donations, or "updates" that lead to credential-harvesting pages. On October 30, the FBI warned about texts and emails telling people they are not registered and routing them to a fake registration page. Results night revives both: "you are not registered for the runoff" and "confirm your registration to keep your vote counted" are the same old hooks with fresh dates. Your registration status lives on your state election site. It does not arrive by text.

The 30-second check I run before tapping anything

I do not have a special tool for this. I have a habit, and it takes about half a minute:

First, read the sender, not the subject. A real county office does not text from a random 10-digit number with a link shortener, and a real newsroom does not email results from a lookalike domain with one letter swapped.

Second, never tap the link to verify the claim. Open a browser and type the official address yourself — your secretary of state site, your county elections page, or a news outlet you already trust. If the claim is real, it will be there within minutes. If it is only in that one message, that is your answer.

Third, check two independent sources before forwarding. A projected call should appear at more than one reputable outlet. A ballot problem should appear on the official tracker. A recount should appear in official statements, not only in a fundraising text. One source is a rumour; two independent sources are a story.

Fourth, treat urgency as evidence against the message, not for it. "Midnight deadline," "your vote will be discarded," "act now or lose it" — legitimate election administration does not communicate through countdown timers in your inbox. Scammers do, because panic skips the checking step.

What a real results alert actually looks like

It helps to hold a picture of the real thing next to the fake. A real results alert names the race and the jurisdiction, cites its source ("Decision Desk HQ projects," "with 78% of precincts reporting"), and links to a page you could also reach by going to that outlet's homepage. It does not ask you to log in, confirm a password, enter card details, or "verify your voter status" to see a result. Results are public information; nobody legitimate gates them behind your credentials.

A real ballot-status notice, meanwhile, tells you which office to contact and gives you a way to reach them that does not depend on the message itself — a phone number you can look up, a site you can type in. If the only path forward runs through the link in the message, the message is the product, and you are the customer it is selling to someone else.

The inbox move that makes all of this cheaper

Here is the part most security advice skips: results-night scams work better when your main inbox is also your campaign inbox, your newsletter inbox, your shopping inbox, and your banking inbox. Every list you joined during the campaign season is another sender that can be spoofed, another subject line you have trained yourself to open without thinking.

The fix is boring and it works. Keep one address for civic and campaign signups — newsletters, petitions, rally updates, candidate alerts — and keep it separate from the address tied to your bank, your primary email account recovery, and your government services. When a "results update" lands in the campaign address, the blast radius of a bad tap is a throwaway list, not your financial life. And when a ballot or registration message lands in your main inbox claiming to be official, the mismatch itself is a warning: your election office never had that address for that purpose, so why would it write there now?

For low-stakes signups — the petition you will forget tomorrow, the newsletter you are sampling — a disposable address is the right tool. It lets you read the confirmation and walk away without adding another permanent sender to your real inbox. What it is never for: voter registration, ballot tracking, or anything tied to your legal identity. Those belong on an address you control long-term, checked through official channels you navigate to yourself. The rule is simple: the more official the message claims to be, the less it should ever arrive through a channel you cannot verify independently.

If you already tapped

Do not spend the night being embarrassed about it; spend ten minutes containing it. Close the page and do not enter anything else. If you typed a password, change it now, starting with your email account, and turn on two-factor authentication if it is not already on — your email is the key to resetting everything else. If you entered card details, call your bank or card issuer and ask what they recommend; a replacement card is an inconvenience, a drained account is worse. If you downloaded something, run your device's security scan and do not trust the file.

Then report it: forward phishing texts to 7726 (SPAM) in the United States, report the email through your mail provider's phishing button, and if money or identity documents were involved, file a report at the FBI's Internet Crime Complaint Center. Reporting feels pointless in the moment, but it is how patterns like tonight's Fulton County texts get flagged for the next county over. The same phishing-first pattern followed the Harvard email breach disclosure earlier today: the leak itself contained no passwords, but the phishing wave it triggered was the real damage.

And if the tap was a verification code you did not expect, treat it as its own alarm. A code arriving out of nowhere usually means someone already has your password and is trying to get past the second step. Change that password from a device you trust, and do not share the code with anyone who asks for it by phone, text, or email.

Frequently asked questions

Can election results really change after they are first reported? Yes, in the ordinary sense: more precincts report, mail ballots are counted, and margins move. What does not happen is a secret reversal delivered only to your inbox. Check the same race at two reputable outlets and on your state election site; if only one message claims a flip, it is not a flip.

How do I check my mail ballot status safely? Go to vote.gov, pick your state, and follow the link to your official election website, then use its ballot lookup tool — often called "track my ballot" or "check registration and ballot status." Type the address yourself. Never use a link from an unsolicited text or email for this.

Is it safe to donate to a recount fund I heard about by text? Only if you can verify the sender independently. Go to the campaign, party, or committee website directly and donate there. A text that pressures you with a midnight deadline and a link you cannot verify is not a safe way to give, however good the cause sounds.

Should I use a temporary email for election newsletters? For newsletters, petitions, and campaign updates, yes — a separate or disposable address keeps campaign-season senders out of your main inbox and limits what a spoofed message can reach. Never use one for voter registration, ballot tracking, or official election correspondence.

What should I do with a suspicious election text? Do not tap, reply, or forward it to friends. Screenshot it if you want a record, report it as spam (7726 in the US), delete it, and check the claim yourself on an official site. If you already clicked, change your passwords and check your accounts, as described above.

The results will still be there in the morning, and they will be more complete and more reliable than anything that buzzed your phone at midnight. The scammers know tonight is when you are watching hardest. Watch the results, not the inbox — and let the inbox wait until you can check it on your own terms.