A message from your bank may be fake if it creates urgency, asks you to click a link, requests your password or one-time code, tells you to move money to a “safe” account, or asks you to call a phone number included in the message.
If you get a suspicious bank text, call, or email, do not respond directly. Do not click the link. Do not call the number in the message. Instead, contact your bank using the number on the back of your debit card, the official mobile app, or the bank’s verified website.
Bank impersonation scams are designed to make you panic. Scammers pretend to be your bank’s fraud department, security team, customer service desk, or even a federal agency. Their goal is to get you to reveal sensitive information, hand over a one-time security code, or move money before you have time to think.
The FDIC warns consumers about bank impersonation scams and fake banks, including scammers who pretend to be from a bank and request information such as Social Security numbers, debit card numbers, credit card numbers, account passwords, or other sensitive details.
What Is a Bank Impersonation Scam?
A bank impersonation scam happens when a criminal pretends to be your bank, credit union, card issuer, fraud department, or another trusted financial institution.
These scams can arrive through:
- Text messages
- Phone calls
- Emails
- Fake bank websites
- Fake mobile banking apps
- Social media messages
- Letters or official-looking notices
The scammer may claim there is suspicious activity on your account, that your debit card has been locked, that a transfer is pending, or that your money is at risk. Then they pressure you to act immediately.
In many cases, the scam starts with a fake fraud alert. You may get a text asking if you authorized a large purchase. If you reply, the scammer may call you pretending to be from the bank’s fraud department. The caller may already know your name, phone number, bank name, or part of your card number, which makes the scam feel real.
But the goal is simple: they want your money, your login information, or your one-time security code.
10 Signs a Text, Call, or Email From Your Bank Is Fake
Not every suspicious message is obvious. Some fake bank alerts look professional and use real bank names. Here are the biggest warning signs.
1. It Tells You to Act Immediately
Scammers rely on urgency. A fake message may say your account will be frozen, your debit card will be canceled, or your money will disappear unless you act right away.
Real banks may contact you about suspicious activity, but you should never be pressured into making fast decisions, sharing codes, or transferring money while someone keeps you on the phone.
2. It Asks You to Click a Link
Fake bank texts and emails often include links that lead to lookalike login pages. These pages may copy the bank’s logo and colors, but they are designed to steal your username, password, card number, or Social Security number.
Do not click links in unexpected bank messages. If you need to check your account, open your bank’s official app or type the bank’s website address directly into your browser.
3. It Asks for Your Password, PIN, or One-Time Code
This is one of the clearest signs of a scam.
A scammer may say they need your one-time passcode to “verify your identity,” “reverse a transaction,” “secure your account,” or “stop fraud.” In reality, that code may let them log in, reset your password, add a device, or authorize a transfer.
Never give a one-time code to someone who contacts you unexpectedly.
4. It Tells You to Move Money to a “Safe” Account
A real bank will not tell you to protect your money by transferring it to a new account controlled by someone else.
Scammers may claim your account is compromised and that you need to move funds to a “secure,” “safe,” or “temporary” account. This is a major red flag. Once you send the money, it may be difficult or impossible to recover.
5. It Asks You to Pay by Wire, Crypto, Gift Card, or Payment App
Scammers like payment methods that are fast and hard to reverse. Be extremely cautious if someone claiming to be from your bank asks you to send money through:
- Wire transfer
- Cryptocurrency
- Gift cards
- Zelle, Venmo, Cash App, or another payment app
- Cash withdrawal
- Money orders
Your bank should not ask you to buy gift cards, send crypto, or move money to prove your identity.
6. The Phone Number Comes From the Message Itself
A fake text may tell you to call a number to stop fraud. That number may lead directly to the scammer.
Instead, call the phone number printed on the back of your debit or credit card, use the number inside your bank’s official app, or visit the bank’s official website by typing the address manually.
Banks.org also has a guide to fraud department phone numbers for major banks, which may help you find the right department faster.
7. The Message Includes Spelling Errors or Strange Formatting
Some scam messages are poorly written. Others are polished. Do not rely only on grammar to decide whether a message is real.
Still, misspellings, awkward wording, strange punctuation, and generic greetings like “Dear customer” can be warning signs.
8. The Website URL Looks Slightly Wrong
Scammers often use URLs that look close to a real bank’s website. They may add extra words, swap letters, use hyphens, or use a different domain ending.
For example, a fake site might use a bank’s name as part of a longer domain that the bank does not actually control.
If a website claims to be an FDIC-insured bank, you can verify the institution through the FDIC BankFind Suite. This is especially useful if you are dealing with a bank you have never used before.
9. The Caller ID Looks Real, but the Call Feels Wrong
Caller ID can be spoofed. That means a scammer can make it look like the call is coming from your bank, even when it is not.
If the caller asks for sensitive information, pressures you to act immediately, or tells you not to hang up, end the call. Then call your bank using a trusted number.
10. The Person Tells You Not to Tell Anyone
Scammers often try to isolate victims. They may say the matter is confidential, that bank employees are involved, or that telling anyone will interfere with an investigation.
A real bank will not require secrecy to help you protect your account.
What Your Bank Will Never Ask for by Text, Email, or Phone
A legitimate bank may ask you to verify your identity when you contact them. But a bank should not unexpectedly contact you and ask you to provide sensitive information through a text, email, or suspicious phone call.
Be suspicious if anyone asks for:
- Your full online banking password
- Your debit card PIN
- A one-time passcode or multi-factor authentication code
- Your full Social Security number by text or email
- Remote access to your computer or phone
- Gift card numbers
- Cryptocurrency payments
- A wire transfer to protect your account
- A payment app transfer to reverse fraud
The safest rule is this: if someone contacts you unexpectedly and asks for private banking information, hang up or stop responding. Then contact your bank directly through a trusted channel.
Examples of Fake Bank Messages
Scam messages change constantly, but many follow the same pattern. Here are examples of what a fake bank message may look like.
Fake Bank Text Example
“BANK ALERT: Did you attempt a $942.18 transfer? Reply YES or NO. If NO, call 888-555-0199 immediately to secure your account.”
This message creates urgency and gives you a phone number controlled by the scammer.
Fake Bank Login Text Example
“Your online banking access has been suspended. Verify your identity now: bank-security-example.com/login”
This message tries to send you to a fake login page.
Fake Fraud Department Call Example
“This is your bank’s fraud department. Your account has been compromised. I’m sending you a code now. Please read it back to me so I can reverse the transaction.”
The one-time code may actually allow the scammer to access your account.
Fake Safe Account Scam Example
“Your funds are at risk. You need to transfer your balance to a secure holding account while we investigate.”
This is a classic “safe account” scam. Do not transfer money based on an unsolicited call or message.
What to Do If You Get a Suspicious Bank Message
If you receive a suspicious text, call, or email from someone claiming to be your bank, take these steps.
- Do not click any links.
- Do not reply to the message.
- Do not call the number in the message.
- Do not share passwords, PINs, one-time codes, or card numbers.
- Open your bank’s official app or type the bank’s website manually.
- Call the number on the back of your debit or credit card.
- Forward suspicious text messages to 7726, which spells SPAM.
- Report the scam to the FTC at ReportFraud.ftc.gov.
- Save screenshots and call logs.
- Monitor your account for unauthorized activity.
The FTC recommends forwarding unwanted or suspicious text messages to 7726 and reporting fraud through its official fraud reporting website. You can learn more from the FTC’s guide on how to recognize and report spam text messages.
What to Do If You Already Clicked a Fake Bank Link
If you clicked a suspicious link, do not panic. What you should do next depends on what information you entered.
If You Clicked the Link but Did Not Enter Information
Close the page. Do not download anything. Do not enter your username or password.
If the page asked you to download an app, security tool, browser extension, or document, do not install it. If you already downloaded something, run a security scan and consider getting help from a trusted technician.
If You Entered Your Bank Username or Password
Go directly to your bank’s official website or app and change your password immediately. Do not use the link from the suspicious message.
If you use the same password anywhere else, change it there too. Reused passwords can allow scammers to break into other accounts.
Call your bank immediately using a trusted number. A one-time code can sometimes be used to authorize a login, change a password, add a new device, or approve a transaction.
Tell the bank exactly what happened and ask whether your online banking access should be locked, reset, or reviewed for unauthorized activity.
Contact the card issuer immediately. Ask whether the card should be canceled and reissued.
Review recent transactions and report anything you do not recognize.
If You Sent Money
Contact your bank immediately. Ask whether the transfer can be stopped, reversed, recalled, disputed, or investigated.
Speed matters. The sooner you contact the bank, the better your chances may be, especially with wires, ACH transfers, debit card transactions, or payment app transfers.
Consider placing a fraud alert or credit freeze with the major credit bureaus. You should also watch for signs of identity theft, such as new accounts you did not open, unexpected credit inquiries, tax notices, or debt collection calls.
For related risks, read Banks.org’s guide on what someone can do with your bank account number.
Will Your Bank Refund You If You Were Scammed?
It depends on what happened, how the money moved, how quickly you reported it, and whether the transaction was unauthorized or authorized under false pretenses.
FDIC insurance is not the same as fraud reimbursement. FDIC insurance protects eligible deposits if an FDIC-insured bank fails. It does not automatically reimburse you for money you sent to a scammer.
If a transaction was unauthorized — meaning you did not make it or allow it — consumer protection rules may apply. The Consumer Financial Protection Bureau explains that after you notify your bank or credit union about an unauthorized transaction, the institution generally has 10 business days to investigate the issue. You can read the CFPB’s guidance on what to do after discovering an unauthorized transaction.
However, if you personally authorized a payment because a scammer tricked you, recovery can be more difficult. That is why it is critical to contact your bank as soon as possible.
If you are unsure whether FDIC insurance applies to your situation, Banks.org has a separate guide to FDIC insurance and bank failure.
How Scammers Make Fake Bank Messages Look Real
Modern bank scams can be convincing. Scammers may use technology and stolen personal information to make their messages feel legitimate.
Common tactics include:
- Caller ID spoofing: The call may appear to come from your bank.
- Real bank names: The message may use the name of a bank you actually use.
- Partial personal information: The scammer may know your name, phone number, or last four digits of a card.
- Fake fraud alerts: The message may look like a real security alert.
- Lookalike websites: The fake login page may copy your bank’s branding.
- Urgent language: The scammer may say your account will be closed or drained.
- Professional scripts: The caller may sound calm, trained, and convincing.
- Fake case numbers: The scammer may give you a reference number to sound official.
The important lesson: a message can look professional and still be fake.
How to Verify Whether a Bank Alert Is Real
The safest rule is simple:
Ignore the contact information inside the suspicious message and contact the bank through a channel you already know is legitimate.
Trusted ways to reach your bank include:
- The phone number on the back of your debit or credit card
- The official mobile banking app
- The bank’s official website typed manually into your browser
- The secure message center inside online banking
- A local branch phone number listed on the bank’s official site
Avoid using:
- Links in unexpected texts
- Phone numbers inside suspicious emails
- Search ads for “bank customer service”
- Social media messages from accounts claiming to be your bank
- Any number a stranger tells you to call while you are under pressure
If the alert is real, your bank will be able to confirm it after you contact them directly.
How to Report a Bank Impersonation Scam
Reporting a scam may not guarantee that you get your money back, but it can help regulators, banks, phone carriers, and law enforcement identify patterns and stop future fraud.
Here are the main places to report bank impersonation scams:
- Your bank: Report suspicious messages, unauthorized transactions, and compromised account information immediately.
- Your mobile carrier: Forward suspicious text messages to 7726, which spells SPAM.
- The FTC: Report fraud at ReportFraud.ftc.gov.
- The FBI: Report internet-enabled scams to the Internet Crime Complaint Center.
- The FDIC: If the scam involves fake FDIC claims, a fake bank, or misuse of the FDIC name or logo, review FDIC guidance on bank impersonation scams and fake banks.
If you are dealing with a legitimate bank dispute rather than a scam, you may also find Banks.org’s guide to filing a complaint about a bank helpful.
How to Protect Yourself From Bank Impersonation Scams
You cannot prevent every scam message from reaching you, but you can make it harder for scammers to succeed.
- Use strong, unique passwords for banking accounts.
- Turn on multi-factor authentication.
- Never share one-time codes with anyone who contacts you.
- Set up account alerts inside your bank’s official app.
- Check your bank statements regularly.
- Keep your phone and banking apps updated.
- Do not store banking passwords in notes, texts, or email drafts.
- Be cautious about what personal information you share online.
- Teach family members, especially older relatives, about fake fraud alerts.
- Slow down whenever someone pressures you to move money.
Scammers want you to act emotionally. Your best defense is to pause, verify, and contact the bank directly.
Quick Checklist: Is This Bank Message Fake?
Before you reply to a text, answer a call, or click a bank link, ask yourself:
- Did I expect this message?
- Is it asking me to act immediately?
- Is it asking me to click a link?
- Is it asking for my password, PIN, or one-time code?
- Is it telling me to move money?
- Is it asking me to use a payment app, wire, crypto, or gift card?
- Is the phone number different from the number on my card?
- Does the website URL look slightly wrong?
- Is the caller trying to keep me on the phone?
- Would I feel safer if I hung up and called the bank directly?
If the answer to any of these questions is yes, stop and verify through a trusted channel.
Frequently Asked Questions
How can I tell if a text from my bank is fake?
A bank text may be fake if it asks you to click a link, call a number in the message, share a one-time code, provide your password, or move money urgently. Do not respond directly. Contact your bank using the number on your card or the official app.
Will my bank text me about fraud?
Some banks do send fraud alerts by text. However, a real fraud alert should not ask for your password, PIN, full card number, or one-time code. If you are unsure, ignore the message and contact your bank directly.
Should I reply STOP to a suspicious bank text?
Do not reply to a suspicious bank text unless you are sure it came from a legitimate bank alert system. Replying may confirm that your number is active. Instead, forward the message to 7726 and contact your bank directly if needed.
Can scammers spoof my bank’s phone number?
Yes. Scammers can spoof caller ID to make it look like your bank is calling. If a call feels suspicious, hang up and call your bank using a trusted number.
What should I do if I clicked a fake bank link?
Close the page and do not enter information. If you entered your username, password, card number, or one-time code, contact your bank immediately and change your password through the official website or app.
What should I do if I gave a scammer my one-time code?
Call your bank immediately. Tell them you gave a one-time code to a suspected scammer and ask them to review your account, lock suspicious access, and check for unauthorized transactions.
Will my bank refund me if I was scammed?
It depends. Unauthorized transactions may have protections under consumer banking rules, but payments you authorized after being tricked can be harder to recover. Contact your bank immediately and ask what options are available.
Does FDIC insurance cover bank scams?
No. FDIC insurance protects eligible deposits if an FDIC-insured bank fails. It does not automatically reimburse you for money lost to scams, phishing, fake bank texts, or authorized transfers to criminals.
How do I report a fake bank text?
Forward the text to 7726, report it to the FTC at ReportFraud.ftc.gov, and notify your bank if the message used your bank’s name or targeted your account.
What information will a real bank never ask for?
A real bank should not unexpectedly ask you for your full password, debit card PIN, one-time security code, or payment by gift card, crypto, or wire transfer. A bank will also not tell you to move money to a “safe” account controlled by someone else.
Bank impersonation scams work because they feel urgent and believable. A fake text, call, or email may use your bank’s name, copy its branding, and pressure you to act before you can think.
The safest response is to slow down. Do not click links, do not share codes, and do not move money because someone contacted you unexpectedly.
Contact your bank directly using a trusted number or the official app. If the alert is real, your bank can confirm it. If it is fake, you may have avoided a costly mistake.
When in doubt, hang up, log in safely, and verify before you act.
Leave a Reply