How to spot a fake bank text, email or call before it costs you

The move every one of these scams makes

A bank impersonation scam always does two things. It contacts you first, and it gives you a reason to act right now: a suspicious charge, a locked account, a payment about to go through. The urgency is the point. It is designed to keep you inside the conversation the scammer started, using the link or phone number the scammer provided.

Everything else is decoration. The logo, the correct last four digits of your card, the caller ID showing your bank's name and the polite professional tone can all be faked or bought.

The one habit that defeats nearly all of them

Never act inside a conversation you did not start. If a message or call says there is a problem with your account, end it and go to your bank yourself: open the bank's app, type the address you already know, or call the number printed on the back of your card.

If the problem is real, you will find it there. If it is not, you have lost two minutes. A real bank employee will never object to you hanging up and calling back on the official number. A scammer always will.

Common scripts

• The fraud alert text: 'Did you make a $489 purchase? Reply YES or NO.' Replying leads to a call from a fake fraud department.
• The helpful caller who needs to 'verify your identity' by having you read back the code that was just texted to you. That code is the scammer signing in as you.
• The safe account: you are told your account is compromised and you must move your money to a new account to protect it. No bank ever asks this.
• The refund or overpayment: someone sends you money 'by mistake' and asks you to send it back a different way.
• The link to 'confirm your details', which opens a copy of your bank's sign-in page.
• The delivery, toll or tax notice with a small fee to pay, which is really collecting your card number.

What a real bank will not do

• Ask for your password, PIN or a one-time code, by phone, text or email.
• Ask you to move money to keep it safe.
• Ask you to install software so someone can view or control your screen.
• Send someone to your home to collect a card or cash.
• Tell you to keep the conversation secret from bank staff or family.

Why scams are getting more personal

Old scam messages were easy to spot because they were generic and badly written. That is no longer a reliable test. Details from data breaches let scammers quote your address or part of an account number, writing tools produce flawless messages, and a voice can be imitated from a short recording.

So stop judging messages by how legitimate they look or sound. Judge them by who started the conversation and what they are asking you to do.

If you already clicked, shared a code or sent money

Do not let embarrassment slow you down. These scams work on careful, intelligent people every day, and speed is the thing that most affects whether money comes back.

• Call your bank on the number on your card immediately and say you have been scammed. Minutes matter for stopping a transfer.
• Change the password for that account from a device you trust, then for your email.
• Turn on or reset two-factor authentication, and sign out other sessions if the service allows it.
• Watch your accounts closely for the next few weeks and consider a credit freeze if you gave away identifying details.
• Report it. In the US, the Federal Trade Commission takes reports, and your bank needs one to investigate.

Messages that claim to be from us

My AI Fin App will never ask for your bank password, by any channel, because the app never handles it. It will never ask you to read out a sign-in code. The one security email it sends on its own is a notice when your account is signed in to from a device it has not seen before, with a link to end every session if it was not you. If a message about your account worries you, do not use its links: open the app or type the address yourself.