The Fake Bank Fraud Alert That Can Empty Your Account

A text pops up from a number that looks like your bank. It says, “Did you spend $487.99 at a retail store? Reply YES if you recognize this charge, NO if you do not.“ You did not spend that money. You reply NO. Minutes later, your phone rings. Caller ID shows your bank’s name and real customer service number. A polite person says they are from fraud prevention and need to verify your account before the charge goes through. That is the trap.

This scam works because it copies something real. Many banks do send fraud alerts by text, email, or phone. Scammers know this, so they build a fake alert around it. They often already have your name, phone number, and the last four digits of your card from a data breach. That makes the message seem official. The goal is to start a conversation that ends with your online banking password, a one-time code, or a transfer out of your account.

The scam moves fast. After you reply, the fake fraud department calls or texts again. They say your account is under attack and you must act now. Then they ask for your username, password, or a code sent to your phone. That code is not a security check. It lets them reset your password, add a new payee, or approve a transfer. In some versions, they ask you to read a code that authorizes a wire transfer. Once they have it, the money can be gone in minutes.

Email versions work the same way. You get a message that looks like your bank’s logo and layout. It says there was an unusual sign-in or a locked account. The link takes you to a fake website that looks like the real login page. You type your username and password, then enter the one-time code. The scammer captures both. Some emails install malware or remote access software, letting a criminal watch your screen and control your computer while you log in to your bank.

People in their 40s through 60s are prime targets. They often have savings, retirement accounts, home equity, and credit lines worth stealing. Many are comfortable with online banking but may not know how quickly spoofing has improved. Caller ID can be faked. Email addresses can look almost real. Text messages can appear in the same thread as legitimate bank alerts. Scammers also count on good manners and create urgency so you do not stop to verify.

The warning signs are consistent. Your bank will not ask for your password, PIN, or full Social Security number over the phone, by text, or by email. It will not ask you to read a one-time code to cancel a fraudulent charge. It will not tell you to transfer money to a “safe account” or buy gift cards to fix a problem. It will not ask you to install remote access software. It will not tell you to keep the call secret or lie to a bank teller. If any of that happens, you are talking to a criminal.

If you get a fraud alert, do not reply, click, or call the number in the message. Hang up. Open your bank’s official app or type the website address yourself. Check your transactions. If something looks wrong, call the customer service number on the back of your card or statement. If you already gave out information, call your bank immediately from that official number. Ask them to freeze your card, lock your online account, and review recent activity. Change your passwords. Turn on two-factor authentication, preferably with an authenticator app rather than text messages. Check your credit reports and consider a fraud alert or credit freeze. Report the scam to the Federal Trade Commission and the FBI’s Internet Crime Complaint Center. Do not be embarrassed.

The real fraud alert is not a conversation. It is a notification inside your bank’s app or a message that tells you to log in through the official channel. If you did not initiate the contact, verify independently. The rush is the red flag. If someone is pressing you to act before you can think, that is the scam. Slow down, hang up, and check with the real bank. That habit will keep your money where it belongs.