Financial Scams
How to Tell If a Bank Text Message Is a Scam
A bank text may be a real alert or a phishing attempt. This guide explains how to verify safely through official banking channels and what to do if you clicked, entered details, or shared a code.
Verify through the bank, not the text
To tell if a bank text message is a scam, do not click the link or call the number in the message. Open your bank's official app, type the website yourself, or call the number on the back of your card. Check alerts and transactions there.
A real bank alert may warn about a transaction, login, card use, or account change. A scam text may use the same subject to push you into sharing a password, one-time code, card number, or online banking details.
No legitimate bank text should require you to send back your password or one-time code.
Red flags in bank scam texts
Bank scam texts often create urgency. They may say your account is locked, a transfer is pending, fraud was detected, or your card will be closed. The link may lead to a fake login page.
The FTC warns that scammers impersonate financial institutions and ask people to click links, call fake numbers, or share information. The safest habit is to leave the text and verify independently.
A scam text can include your name, partial phone number, or other details. Exposure data can make scams look more personal.
- Requests for your password.
- Requests for one-time codes.
- Urgent account closure threats.
- Suspicious short links.
- Fake fraud department phone numbers.
- Payment or transfer pressure.
Check exposure and account risk
If your phone number or email appears in known exposure data, you may be more likely to receive fake bank texts. A match does not prove your bank account is affected.
Only check identifiers you own or are authorized to manage. Do not enter banking details, card numbers, SSNs, passwords, or codes into an exposure checker.
If the text is real
Handle the issue inside the official banking app or by calling the official number. Review transactions, account alerts, contact information, devices, and security settings.
If a transaction is unauthorized, contact the bank immediately.
If the text is fake
Report it as spam or phishing, block the sender if appropriate, and delete it after preserving records if you need them. Do not reply with STOP to clearly fraudulent texts unless your carrier recommends that process.
Warn family members if they might receive similar messages.
If you clicked or entered information
If you entered online banking credentials, change your password through the real bank site or app and call the bank. If you shared a one-time code, contact the bank immediately because codes can be used quickly.
If you entered card details, ask about card replacement and monitor transactions.
- Call the bank through official channels.
- Change online banking password.
- Review recent transactions.
- Check contact info and devices.
- Enable stronger MFA.
- Save scam records.
Protect your phone number
Set a carrier PIN and ask about SIM swap or port-out protection. If a scammer controls your number, SMS banking codes may be at risk.
Move important accounts to stronger authentication methods where supported.
Report fraud if money moved
If money was transferred or accounts were opened, document the event and use official reporting channels. The FTC and FBI IC3 provide consumer reporting paths for scams and internet crime.
Keep transaction IDs, texts, dates, and bank case numbers.
Frequently asked questions
Will my bank ask for a one-time code by text?
A bank may send codes, but it should not ask you to send a code back to an unexpected caller or texter.
What if the text shows a real transaction?
Open the official bank app or call the number on your card to verify. Do not use links or numbers in the text.
Should I change my bank password?
Yes if you entered it on a suspicious page, reused it, or see suspicious account activity.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.