Text Scams on the Rise
How Do Bank Mobile Alert Scams Work?
Text scams, in addition to alerting you about a supposed unauthorized charge or another improper activity on your account, will usually ask you to click a link or respond “yes” or “no” to validate a charge.
If you click on the link, you will usually be taken to a form that looks like a real bank form and asks you to enter your personal information. In addition to stealing your identity, clicking the link may also install malware on your device, allowing scammers to access it and steal further information so they can commit more financial crimes.

If you respond “yes” or “no” to the fraudulent text, that will alert the scammer that you have fallen for the scheme. At that point, they may call you to try to wring more information out of you, such as your email address, bank login details or your account number. They will use any information you provide to attempt to take money from your account, open new bank accounts under your name, or commit other financial crimes.
Don’t Give Out Verification Codes
You may receive legitimate bank verification codes by text that you use to access your accounts. Remember that a bank employee will NEVER call you and ask for those codes. If you get such a call, it’s a scammer attempting to gain access to your account. Never share any verification codes over the phone.
Beware of Spoofing Scams
Using a method called spoofing, scammers can make calls and send text communications that appear to be from an official or known number. Knowing the possible signs that this is happening can protect you and your account from fraud. We will never ask you for your online banking password, debit card PIN or one-time multifactor verification code.
What to Do if You Receive a Bank Scam Text?
Most people with mobile phones receive bank scam texts from time to time. When you receive one, delete it immediately. If you’re not sure whether it’s a scam or a legitimate text from your bank, contact your bank directly, using a publicly listed phone number rather than responding to the text.
Secure your private information. Avoid providing any private information to any individual that has contacted you. That includes account logins and passwords, PIN numbers, credit card validation codes, bank account numbers, credit or debit card numbers and your Social Security number.
If you believe your information has been compromised, report it immediately and change your login, password and PIN as soon as possible.
How Do You Know If a Bank Text Alert is Real?
Remember these important facts about bank texts:
- We will never ask you to provide or confirm personal details or confidential information via text.
- Beware of texts that provide email addresses or phone numbers and ask you to respond. Scammers often
create fake email addresses and phone numbers that look like a bank’s official versions, hoping that their
intended victims won’t notice. Before you reach out, independently verify the contact information via your
bank’s website yourself. - Be on the lookout for red flags such as strange formatting, typos, incorrect grammar or spelling and other
unprofessional mistakes. - Avoid clicking on links that are shortened or that don’t take you to an official bank web page.