Fraudulent bank text messages, otherwise known as smishing, are an attempt to trick you into giving up information by creating fake urgency about locked accounts, large transactions, or security issues. Banks never text asking for sensitive data, so delete, report, block and call your bank directly using the number on the back of your debit/credit card to verify any real alerts.

Here are some tips on what to watch for:

Common Scam Tactics

• Urgent Alerts – Claims of locked accounts, suspicious login attempts, or unauthorized purchases to make you panic.
• Information Requests – Asking for PINs, SSNs, or account details to “verify” activity or update information.
• Phony Links – Links to fake websites that look real to steal login credentials.
• Fake OTP Requests – Pretending to be the bank to get a one-time passcode you just received for a legitimate action.

Red Flags

• Urgency – Messages demanding immediate action.
• Bad Grammar/Formatting – Typos, strange spelling or unprofessional layout.
• Unfamiliar Numbers/Short Codes – Texts from numbers other than your bank’s official short code alert number.
• Requests for Personal Information – Bank’s never ask for sensitive data via text.

What to do:

• Don’t Click/Reply – Never interact with the message.
• Delete – Remove the message.
• Report – Use your phone’s spam report feature, report to the Federal Trade Commission at This email address is being protected from spambots. You need JavaScript enabled to view it. and to your bank.
• Block – Block the number.
• Verify – Call your bank using the number on their official website or your debit/credit card to check for real issues.

Visit our Banking Safety webpage to learn more about other ways to protect yourself from scams.