How to Spot a Fake Bank Fraud Alert Text Message

Your phone buzzes with a text that looks like it's from your bank: "Your account has been locked due to suspicious activity. Verify your identity now." There's a link right there, and your stomach drops a little. That reaction is exactly what the scammer is counting on.

This kind of message is called a fake bank fraud alert text, and it's one of the most common scams seniors see today. The good news is that once you know what to look for, it gets much easier to spot — and to ignore.

In this article, you'll learn how these texts work, the signs that give them away, and what to do whether you've already tapped the link or not.

What a fake bank fraud alert text looks like

These texts usually follow the same pattern. They say there's a problem with your account — a lock, a suspicious charge, a failed payment — and they ask you to tap a link to fix it right away. The link leads to a website that looks like your real bank's login page, but it isn't. It's a copy, built only to collect your username and password.

Some versions take it a step further and ask you to call a phone number instead of clicking a link. If you call, a person pretending to be from your bank's fraud department will ask you to "verify" your account number, card number, or one-time login code.

The message may use your bank's real name and logo, and the sender's number might even look like it belongs to your bank. None of that proves it's real. Scammers can fake, or "spoof," the sender name on a text message.

Why these texts work

These texts work because they create urgency. A locked account or a fraud alert feels like something you need to fix immediately, so you act before you've had time to think it through. That rushed feeling is the scam's whole strategy, not a sign that something is actually wrong.

They also rely on the fact that real banks do send real text alerts sometimes, so the fake ones blend in with messages you're used to getting. A scammer only needs the link tapped once to capture a username and password, and from there they can move money or open new charges before you ever notice something is wrong.

Scammers send the same fake fraud alert to thousands of phone numbers at once. They don't need to know which bank you actually use — if a message happens to name your real bank, it feels personal and convincing, but it's really just a guess that paid off.

How to tell if it's real

A few checks can tell you a lot:

1. Don't tap the link in the text. Instead, open a new browser window yourself and type in your bank's website address, or use the bank's official app that you already have installed.
2. Call the number on the back of your card, not any number from the text. That printed number goes straight to your real bank.
3. Look closely at the web address, if you do end up on a page from a link. A fake site often uses a close misspelling of your bank's name, or adds extra words before or after it.
4. Ask yourself if your bank has ever texted you a link before. Many banks never do, and will tell you so if you call and ask.
5. Remember that a real bank will never ask you for your full password or a one-time login code over text or phone. If anyone asks for that, it's a scam.

If you're even a little unsure, it's always safe to hang up, close the text, and call the number on your card to check directly.

What to do if you already tapped the link or gave information

If you entered your bank username and password on a page you now think was fake, don't be embarrassed — this happens to careful people, and acting quickly matters more than feeling bad about it. Call your bank right away using the number on your card and tell them what happened. They can watch your account, help you change your password, and reverse unauthorized charges in most cases.

If you gave out a one-time code or let someone remote into your computer, that's a sign your computer itself may need a closer look, not just your bank account. That's a good moment to get hands-on help cleaning up after a scam, rather than trying to sort it out alone.

What to do if you're stuck

If a text like this has you rattled and you just want someone to walk through it with you, that's completely reasonable. You don't have to figure out whether something is a scam all by yourself.

If you want quiet protection on your Windows or Mac computer — with a real Porchswing person to call — learn about PorchswingProtect. Or call us at (916) 521-0065 and we'll help you set it up.

Common questions

Can a scam text really look like it's from my real bank's number?

Yes. Scammers can disguise, or "spoof," the sender's name and number on a text message so it appears to come from your bank, even though it doesn't. Seeing your bank's name on a text is not proof the text is real.

What if the text mentions my real name or the last four digits of my card?

Scammers sometimes already have pieces of personal information from past data breaches, and they use them to make a fake message feel more convincing. A detail being correct doesn't mean the whole message is legitimate — the safest move is still to verify by calling the number on your card.

Should I reply "STOP" to one of these texts?

No. Replying to a scam text, even just to say stop, confirms to the scammer that your number is active and being read. It's better to delete the text without replying and block the number if your phone allows it.