Text says your bank account is locked? Stop. Check first.
Fake bank alerts are designed to make you panic: your account is 'locked', a large purchase 'was declined', or someone 'logged in from a new device'. The text pushes you to tap a link or call a number — both lead to criminals who ask you to 'verify' your card number, online banking password or one-time codes. Real banks do send fraud alerts, but they never ask for your password, PIN or full card number, and they never mind you hanging up and calling the number on the back of your card.
What the scam looks like
BANK ALERT: A purchase of $847.20 at BESTBUY was declined on your card. If this wasn't you, your account will be frozen. Verify now: secure-bank-verify.net or call 1-800-555-0147.
Example based on real reported scam messages.
The warning signs
- Fear first, facts later — A scary amount and a threat that your account will be frozen — designed so you act before thinking.
- Link is not your bank — Hover or long-press the link: it's a look-alike domain, not your bank's official site.
- The phone number is fake too — The 'call this number' option connects you to the scammer's call center, not your bank. Only trust the number on the back of your card.
- They'll ask for codes — Anyone asking for your one-time security code, password or PIN is a criminal — real banks never ask, ever.
Got a message like this?
Paste it into the free Trust.ai checker. You'll get a risk score and the exact warning signs it found — no account needed.
Check my message — freeWhat to do right now
- Don't tap the link and don't call the number in the text. Call your bank using the number printed on the back of your card and ask if there's a real alert.
- Check the message with Trust.ai below to see exactly which warning signs it contains.
- Forward the text to 7726 (SPAM), then delete it.
- If you shared your password or a security code, call your bank immediately, change your online banking password, and turn on two-factor authentication.
Common questions
How do I know if a bank fraud alert is real?
Real alerts are informational: they name the bank, often the last four digits of your card, and ask you to reply YES/NO or call the number on your card. They never include a link to 'verify your identity' and never ask for passwords, PINs or one-time codes.
The text knew my bank's name — does that make it real?
No. Scammers send millions of texts naming the biggest banks, so a large share of recipients are actual customers. It's a numbers game, not inside knowledge.