The Fake Bank Fraud Alert Text Scam: What It Looks Like and What to Do

A text arrives asking if you just spent $500 at a Walmart three states away. You reply NO, relieved your bank caught it. Minutes later your phone rings — caller ID says it's your bank — and a calm, professional "fraud specialist" walks you through "securing your account."

By the end of the call, your account really is drained. Not by the fake Walmart charge, which never existed, but by the person you just spoke to.

How the scam works

This is a two-act scam, and the text is only the setup. Scammers send fake fraud alerts styled after real bank texts, often guessing your bank or buying breached data that tells them where you bank. There was no suspicious charge. The text exists to get one thing: your reply.

Replying NO tells them you're paying attention and primed to cooperate. Then comes act two: the phone call. The caller sounds exactly like a bank employee — calm, scripted, even using real fraud department phrases. Caller ID often shows your bank's real name, because caller ID is easily faked.

Then they "help" you. They might ask you to read back the one-time code texted to your phone (which lets them into your online banking). They might ask for your username and password to "verify your identity." Or they use the scariest move of all: telling you your money is at risk and you must move it to a "safe account" with Zelle or a wire transfer. The safe account is theirs.

The red flags in the example above

• A specific store and city you've never shopped in. Designed to make you reply NO fast.
• "A fraud specialist will contact you." Real banks resolve card fraud in the text itself or wait for you to call them. A promised inbound call is the setup for act two.
• The follow-up call asks for credentials. Your bank already knows your password and never needs to ask for it, ever.
• Requests for one-time codes. Those codes exist to stop strangers from logging in. Anyone asking you to read one aloud is the stranger.
• "Move your money to a safe account." No bank in America secures your money this way. This sentence alone means it's a scam, 100% of the time.

What to do

1. Don't reply to the text. If you're unsure whether it's real, that's fine — just check directly.
2. Call the number on the back of your card. That's always your bank. Ask if there's any fraud alert on your account. This takes two minutes and defeats the scam completely.
3. Never give a caller your password, PIN, or a texted code. No matter how legitimate they sound or what your caller ID says.
4. Report the text. Forward it to 7726 (SPAM) and report it at reportfraud.ftc.gov. Then delete it.

If you already gave them something

1. Call your bank's real number immediately — the one on your card or statement. Tell them your account is compromised. Minutes matter with transfers; banks can sometimes stop or reverse them if you're fast.
2. Change your online banking password and any other account that shares it.
3. If you moved money "to a safe account," tell your bank exactly what happened and ask them to attempt recovery, then file a report at reportfraud.ftc.gov and with local police. Reports strengthen your case for reimbursement.
4. Watch your statements for the next few months and consider a free credit freeze at the three bureaus.

Here's the reassuring part: this entire scam, in all its versions, dies against one simple habit. Never act on an incoming call or text about your bank account — hang up and dial the number on the back of your card. That number is always the truth.