What You Need to Know to Protect Yourself Against Bank Scams

They ask you to verify large purchases charged to your account. Some fake bank notification texts warn the target that an account has been locked, while others ask the person to verify a large purchase that supposedly has been made at a store. “If they reply ‘no,’ which many people might do reflexively, they’ll get a call from someone claiming to be the bank,” Fletcher says. 

“The text messages from our bank to verify transactions are generated by the bank’s electronic fraud controls — not by humans — so an immediate follow-up call from the bank is a bright red flag of a scam attempt,” says Kathy Stokes, director of fraud prevention programs with the AARP Fraud Watch Network.​

They ask you to cut up your card. The FBI recently warned of scammers who call and tell you need to cut up your card due to fraudulent activity but ask you to leave the card chip intact. They then say they are sending a “bank representative” to pick up the card. They may try to get you to tell them your PIN number and then use that to empty your account.

Fake bank messages try to create a sense of urgency

Typically, a scammer on the phone will try to alarm the people being targeted, saying that they must take immediate action to protect their accounts from being emptied.

“They will be walked through a series of steps that they’ve been led to believe will cause the fraudulent purchase or transfer to be reversed,” Fletcher says. But the money is actually being transferred into the criminal’s account.

Sometimes the scammers will guide targets to sophisticated replicas of actual bank websites.

“Other than a different web address, you really can’t tell that they’re fake,” explains Aaron Foss, founder of Nomorobo, a security company that specializes in blocking robocalls and spam text messages for its clients. “They use fear to get people to quickly tap on the link and not look at the URL too closely.”

The object in such cases is to steal victims’ login credentials and other personal data.

Bank impersonation robocalls, meanwhile, aim to connect victims to a live scammer, who then carries out the scams noted above. Or sometimes the criminal on the phone will tell victims to download remote-access software, which people don’t realize will actually give the scammers access to their computers, Foss says.

How to protect yourself against bank text scams

Never click on links. If you get an email or a text claiming to be from your bank, don’t click on the link it provides (even if you’ve signed up for text alerts). Instead, go to the bank’s website. Use the URL listed on your statements or that you’ve previously bookmarked, and check for any alerts on your account.

Hang up. Then contact your bank in a way you know to be legitimate, either online or by calling the phone number on your statement or debit card.

Never provide account data or personal info. As the American Bankers Association’s banksneveraskthat.com website reminds consumers, banks don’t ask for your account number, PIN or password during a phone call or in a text or email — and will never ask for a one-time login code. Never share such confidential details unless you’ve called the number on the back of your bank card.

Don’t rely on caller ID. Scammers can use technological tricks to display actual bank phone numbers or even the name of the bank.

Be wary of a message or caller insisting that you take immediate action. Scammers try to pressure you to act quickly, to make it more difficult for you to think clearly.

When in doubt, seek assistance. If you’re unsure what to do in response to what appears to be an alert from your bank, stop and ask a trusted person — a friend, family member or coworker — to help you.  

Reporting bank impersonation scams

Notify your financial institution of the occurrence. Include a screenshot of the text. (Here’s how to create one.) If you lose money to this scam, contact your bank immediately — it may be able to halt the transaction.  

File a police report. The documentation may be of value if there is some means of recouping your loss. For example, some home insurance providers offer fraud loss protection.

File reports with the federal government. The FTC and the FBI’s Internet Crime Complaint Center use fraud reports to target their investigations. The more information they have, the better they can identify patterns, link cases and ultimately catch the criminals. Contact the FTC at reportfraud.ftc.gov and the FBI at IC3.gov.

Call the free AARP Fraud Watch Network Helpline. Call 877-908-3360 to speak with trained specialists who can provide support and guidance on what to do next and how to avoid scams. The AARP Fraud Watch Network also offers online group support sessions.