Bank fraud alert texts: the call afterward is the danger
A text asking whether you made a large charge, often with instructions to reply YES or NO and a number to call, may be a scam even though banks do send real fraud alerts. The scam version uses your reply to start a conversation, then moves you to a call where a fake fraud agent talks you into moving money, sharing one-time codes, or installing remote access. The defense is simple: only ever respond through your bank's own app or the number printed on your card.
What to do
- Do not reply, and do not call any number in the text. Treat the message as untrusted even if it names your real bank.
- Open your bank's official app or call the number on the back of your card and ask whether a fraud alert exists. The real bank can see its own alerts instantly.
- Check your transactions in the app. A real declined or pending charge shows there; a scam invents one.
- Never share one-time passcodes with anyone who contacts you. Banks state plainly that their staff will never ask for them. A code read to a caller hands over your account.
- Report the text as junk and forward it to 7726 if supported.
How the conversation scam unfolds
- A frightening charge appears, big and specific, at a store you might plausibly use.
- Your NO reply triggers a call from 'the fraud department,' with a spoofed caller ID showing your bank's name.
- The agent builds a story, your account is compromised, money must be moved to a 'safe account,' or codes must be read back to 'verify' you.
- Every step moves control to the caller. Real fraud teams block cards and investigate; they never ask customers to move money or read out security codes.
Shared a code or moved money? Call your bank immediately on the number on your card, say you were socially engineered, and ask for a recall and account lockdown. Speed is everything with transfers. Change your online banking password from a clean device, and report at reportfraud.ftc.gov and ic3.gov. Also tell the bank in writing so the timeline is documented.
Common questions
My bank really does send fraud texts. How do I tell them apart? Real ones come from the bank's known short code, ask only for a yes or no reply, and match a transaction visible in your app. When in doubt, skip the text entirely and check the app or card number, the real alert will be confirmed there.
Is replying STOP or NO dangerous by itself? A reply alone cannot empty an account, but it confirms an active, responsive number and usually starts the call phase. The safest response to an unexpected fraud text is silence plus a check through official channels.
Related