The text looks like a routine security check: “Bank Fraud Alert: Did you attempt an instant payment of $5,000? Reply YES or NO.” It names a real bank, the amount is alarming, and replying feels like the safe thing to do. It isn’t. Fake “fraud alert” texts about a suspicious purchase or a problem with your bank were among the most commonly reported text scams in 2024, a year when people reported losing $470 million to scams that started with a text (FTC).
How the fake fraud alert scam works
- The text. A message claims to be your bank’s fraud team and asks if you made a purchase or instant payment. The bank name and amount change from person to person, and scammers send texts “from” different banks hoping to guess yours (FBI).
- The reply. If you answer, you get a message saying a fraud specialist will contact you shortly (FBI IC3).
- The call. The caller says they’re from the fraud department. The number can appear to match your bank’s real support line, and they may already know your address or the last digits of your account (FBI).
- The “fix”. To “reverse” or “block” the fake payment, they talk you through changing details in your payment app and sending a transfer. That transfer goes straight to them (FBI IC3).
- The loss. Many people only realise when they check their balance afterwards (FBI).
Unlock the full guide with ImposterWatch Personal, US$9/mo
Members read every guide in full, plus get breach and dark web alerts for up to three email addresses, an AI-powered romance scam check every month, and account recovery help.
Get protected for US$9/month, cancel anytime Already a member? Log in
Warning signs
- An unexpected text asks you to reply YES or NO, tap a link, or call a number to confirm a payment.
- Pressure to act right now or your account will be locked or emptied.
- A caller asks you to move money, “reverse” a payment, or send money to a “safe account”.
- Anyone asks for a one-time code, PIN, password or remote access to your phone.
- You’re told to change the email address or phone number linked to your payment app.
How to protect yourself
- Don’t reply to, tap links in, or call numbers in unexpected bank texts. If you think it might be real, contact your bank using a number or website you know is real (FTC).
- Check for the payment yourself in your bank’s app or website, opened directly, not from the text.
- Turn on multi-factor authentication for your bank and payment apps, and never read those codes out to anyone (FBI IC3).
- Remember: banks won’t ask you to transfer money between accounts to prevent fraud (FBI IC3).
- Check an unknown number with the free phone scam check, and see how to tell if a call is a scam.
If you already replied, called or paid
- Hang up and call your bank on the number on the back of your card. Ask them to stop or recall any transfer.
- Change your online banking and email passwords, and remove any email address or device you didn’t add.
- In the US, forward the text to 7726 (SPAM) so your carrier can block similar messages (FTC).
- Watch out for “recovery” offers afterwards. Those are scams too.
Where to report
- US: ReportFraud.ftc.gov and the FBI’s IC3.
- Australia: Scamwatch.
- UK: Action Fraud (or Report Fraud in Scotland via Police Scotland 101).
- Canada: the Canadian Anti-Fraud Centre.
- New Zealand: Netsafe.
Questions
The call came from my bank’s real number. Doesn’t that prove it’s real?
No. The FBI warns that scammers call from numbers that appear to match the bank’s real support line. Caller ID can be faked. Hang up and call the number on your card yourself.
They knew my address and the last digits of my account. How?
The FBI says scammers may already know personal details from past data breaches and use them to sound legitimate. Knowing your details doesn’t make them your bank.
I replied “NO”. Am I in trouble?
Not yet. Don’t answer the follow-up call, or hang up if it comes. Then call your bank on the number on your card and tell them what happened.
I sent money to “reverse” the payment. What now?
Call your bank’s fraud line straight away (the number on your card) and ask them to stop or recall the transfer. Then change your banking password and report it (links below).
Get free scam tips
Got a “fraud alert” text or call?
Check the number with the free phone scam check before you reply or call back. ImposterWatch Personal (US$9/month, cancel anytime) adds AI-powered checks, breach alerts for up to three email addresses and account recovery help.
Run the free phone checkGet protected for US$9/month, cancel anytimeMore guides
- How to check if an email is really from a company
- How to tell if a call is a scam
- Romance scam warning signs
- How to reverse image search a dating profile
- Military romance scams
- Crypto romance scams (pig butchering)
- Sent money to a romance scammer? What to do now
- Is my online match real? How to check
- Has my email been in a data breach?
- “I have your password” sextortion email scam
- How to tell if an email is a scam
- How to check if a website is fake
- Grandparent and family emergency scams
- Clicked a toll text link? What to do now
- Crypto romance scams: helping a parent
- Tech support pop-up scams
- “Hi Mum” text and WhatsApp scams
- Florida scams: Miami, Orlando and Tampa
- Facebook Marketplace buyer and seller scams
- Task job scams: “earn from home” texts and WhatsApp offers
- All guides
General information only, not legal or financial advice. ImposterWatch is operated by Cloud Investments FZE (UAE) and is not a background check or private investigator service.