How to tell if a call or text from your bank is real

How to tell if a call or text from your bank is real

"This is your bank's fraud department. We've detected a suspicious charge and need to verify your identity." Or the text: "Your account has been locked. Verify your information here." Bank impersonation is one of the most effective phone scams around, not because scammers are tech geniuses, but because they've perfected the script: urgency, authority, and a fix that requires you to act now, without thinking.

The good news: you don't have to be able to tell a real call from a fake one in the moment. Nobody can, because the number on your screen can be faked and the scripts imitate real bank staff well. What you need is a method that works without having to decide. Here it is.

The method: hang up, then call back yourself

It works for calls and texts alike, and it has three steps:

1. Do nothing inside the incoming call or message. Don't give out information, don't tap links, don't press keys, don't install anything, and don't read out codes you receive. If it's a call, say goodbye politely and hang up. Nothing bad happens if you hang up on your real bank: they'll call again or you'll sort it out another way.
2. Open the official channel yourself. Call your bank's number (the one on the back of your card or on its official website, typed in by you), or open the bank's official app, downloaded from the app store. Never use the number that called you or the link they sent.
3. Check there. If there really was a suspicious charge, a locked account, or a pending issue, it will show up in your account activity or a real representative will confirm it. If nothing shows up, the call or text was fake.

That's it. The trick is understanding why it works: you choose the channel, so it doesn't matter that the scammer faked the number or cloned the bank's website. Their trick lives inside the call or the text; the moment you step outside it, they have nothing.

The same method works for checking a message from the IRS or Social Security, for the fake unpaid-toll text, and for the fake package delivery text. Learn it once and it works for everything.

What your real bank will never ask you for

Memorize this list, because it's the quick test whenever you're unsure:

• Your PIN, your full password, or your online banking login. Your real bank may ask you to sign in to ITS app or ITS website; it will never ask you to read your passwords out over the phone or send them by text.
• The one-time codes sent to you by text. Those codes approve transactions and sign-ins. Anyone who asks for them over the phone is trying to get you to approve something THEY started. This is the central trap in almost all bank phone scams.
• That you install a remote-access app (AnyDesk, TeamViewer, and similar) "to help you." No bank does that. It's the step right before they empty your account in front of your eyes.
• That you send a "test" payment, or move money "to reverse the fraud" or to a "safe account." Payments you send yourself, by wire or through Zelle, are very hard to reverse. Your bank will never ask you to move money over the phone to protect it.
• That you act without hanging up. "Don't hang up, it's urgent; if you hang up, the charge goes through." Rushing you is the scammer's tool. Your real bank would rather you verify than obey quickly.

The most common variants and their scripts

• The charge you don't recognize. "There's an $800 charge at an electronics store. Did you make it?" You say no, and they walk you through "reversing" it: install something, read out codes, send a payment. Everything after the "no" is the scam.
• The locked account by text. A link to a site identical to your bank's, where you enter your username and password. From that point on, they're the ones using your account.
• The fake employee who's "protecting" you. Friendly, professional, and armed with your basic details (name, address, the last four digits of your Social Security number or your card: all of that circulates in data breaches). Professionalism verifies nothing; only the channel does.
• The disguised Zelle payment. They ask you to approve something in your banking app "to verify your identity," and it's actually a Zelle payment to them. Always read what you're approving in the app.

What to do if you already gave out information or codes

1. Call your bank immediately (the number on the back of your card) and explain what happened. Ask them to block your cards, stop any pending transactions, and reset your login credentials.
2. Review your account activity over the following days with your app's alerts turned on.
3. Report it at ReportFraud.ftc.gov with screenshots and the caller's number. If money was taken, also report it to the FBI's IC3 and to your local police; if your bank doesn't resolve it, you can file a complaint with the Consumer Financial Protection Bureau (CFPB).
4. Report the number in the spam numbers directory so it gets flagged.
5. The NoCall blog covers what to do in the first hour after a phone scam and how "fraud department" calls work.

Quick questions

Doesn't the number on my screen prove it's my bank? No. Caller ID can be faked (it's called spoofing), and scammers use it precisely with real bank numbers so that a quick search makes the call look legitimate. That's why the rule is never to decide anything inside the call.

What if they already know my name, my address, and my balance? Personal details circulate in data breaches, and balances can be vaguely invented ("a large charge"). Knowing things about you doesn't make them your bank. Use the method anyway.

Can I ask them something to verify them myself? You can ask for the representative's name and a case number... and then hang up and call your bank yourself to check. Any "verification" that happens without hanging up verifies nothing.

Will my bank be upset if I hang up? No. Hang up without guilt and call back on the official number. That's exactly what their fraud department wants you to do.

Remember the rule in one sentence: if your bank contacts you, do nothing there; hang up, open the official channel yourself, and check. Share it with the people around you: it may be the sentence that saves the most money.