How to Spot a Fake Bank Text Before You Click

Warning signs, a safe way to verify, and what to do if you already tapped a suspicious message

A text arrives saying your bank has spotted suspicious activity on your account, and it asks you to tap a link right now. That jolt of worry is what the sender is counting on. Fake bank texts work because they create urgency before you have time to think. These messages follow patterns, and once you know them, you can spot most before you click.

Why Fake Bank Texts Deserve Your Attention

The Federal Trade Commission (FTC) published a Data Spotlight in June 2023 covering reports from 2022. In that year, consumers reported losing about $330 million to text message scams, with a median loss of $1,000. These are 2022 figures, not today’s, but they show what one rushed tap can cost.

According to the same FTC analysis, reports of texts pretending to be from a bank rose from 1,355 in 2019 to 2,231 in 2020, then to 13,677 in 2021 and 25,725 in 2022. In 2022, the median loss on those fake fraud prevention alerts was $3,000. I found no newer official FTC figure, so treat these as a dated snapshot.

The Warning Signs That Give a Fake Text Away

The Message Is Unexpected and Urgent

The FTC lists several common signs of a phishing text. It comes out of nowhere from a company you know. It mentions suspicious activity or a problem with your account or payment. It asks you to confirm personal or financial details. And it pushes you to click a link to pay a bill, update payment information, or claim a refund or free offer. The FTC adds that legitimate companies generally do not text links asking you to update payment details.

The Request Is Something a Bank Would Not Ask by Text

The FTC adds more red flags in its guidance on spam texts. Be suspicious of requests for passwords, account numbers, or a Social Security number. Offers that look too good to be true, such as prizes or gift cards, are another warning. Fake purchase or package delivery alerts are common, as are links to bogus sites that capture your login or install malware. According to the FTC, legitimate companies do not ask for your account information by text.

The Fake Fraud Alert Script

The FTC describes how the fake bank scam usually unfolds. The text imitates a fraud alert. It gives a number to call or asks you to reply yes or no about a large transaction. If you respond, a fake fraud department calls, and you think you are protecting your money. In reality, the funds are moved out of your account. Many victims also hand over a Social Security number, which can lead to identity theft.

Quick Self-Check

Think about the last message that rushed you about money. Did you stop to ask who really sent it? If a message makes you want to act before thinking, which part of it would you check first: the link, the phone number, or the request itself?

How to Verify a Text Without Clicking

The FTC’s advice is simple: do not click links in unexpected texts. If you have any doubt, contact the company using a phone number or website you already know is real, not the details in the message. Filters and blocking tools on your phone or carrier can also help.

A Canadian angle adds a few practical habits. As reported by Global News, which summarized figures from the Canadian Anti-Fraud Centre (CAFC), the advice includes not clicking, checking the sender against the number on the organization’s official website, never replying with STOP or NO, and blocking and deleting the message. I read this report only through a search summary, so treat it as supporting context.

If You Already Clicked or Replied

You Clicked a Link or Opened an Attachment

The FTC recommends updating your security software, running a full scan, and removing anything it flags. If you entered a Social Security number, a card number, or bank account details, follow the steps at IdentityTheft.gov.

You Paid or Shared Details With the Scammer

For a bank transfer or a payment through Zelle, contact your bank right away and ask for a reversal. For a credit or debit card, call the number on the back of the card and ask for a chargeback. The FTC points out that federal law sets limits on your liability for unauthorized card use. If the scammer got a password that still works, change it, change any other account that uses the same one, and turn on two-factor authentication. If your Social Security number was used, report it at IdentityTheft.gov.

Where to Report a Fake Bank Text

In the United States, the FTC says you can forward the text to 7726 (SPAM) so your carrier can help block similar messages. You can also use the report junk or spam option in your messaging app and file a report with the FTC at ReportFraud.ftc.gov. For a phishing email, forward it to reportphishing@apwg.org.

In Canada, you can report to the CAFC online at reportcyberandfraud.canada.ca, as a victim or a witness, with an anonymous option. You can also call the toll-free line at 1-888-495-8501. At the time of review, the listed hours were Monday to Friday, 10:00 a.m. to 4:45 p.m. Eastern time, closed on holidays, but hours can change, so confirm them on the CAFC site before you call. According to the Global News report, forwarding a message to 7726 also works in Canada.

Why Reporting Matters Even If You Lost Nothing

The same Global News report cited CAFC figures of 886 smishing reports in the first half of 2025 and 2,546 in 2024, and said the CAFC estimates that only 5% to 10% of victims report.

Frequently Asked Questions

Can a real bank text me a link?

The FTC says legitimate companies generally do not send emails or texts with links to update your payment details, and that they do not ask for your account information by text. When in doubt, skip the link and contact your bank another way.

What should I do right after I notice a fake text?

Do not click or reply. Forward the text to 7726 (SPAM), report it in your messaging app, and file a report at ReportFraud.ftc.gov.

I clicked the link but entered nothing. Am I safe?

Not necessarily. The FTC suggests updating your security software, running a full scan, and removing anything it finds. If you shared card, bank, or Social Security details, follow the steps at IdentityTheft.gov.

Are the 2022 loss numbers still accurate today?

They describe 2022 only, as released by the FTC in June 2023. I did not find a newer official FTC figure, so treat them as a historical snapshot.

This content is for informational purposes only and does not constitute personalized financial advice. Terms and conditions change, so confirm the details with the official provider before making a decision.

Last reviewed: 2026-10-19

Sources consulted:

• https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
• https://consumer.ftc.gov/articles/how-recognize-and-report-spam-text-messages
• https://consumer.ftc.gov/articles/what-do-if-you-were-scammed
• https://www.ftc.gov/news-events/data-visualizations/data-spotlight/2023/06/iykyk-top-text-scams-2022
• https://antifraudcentre-centreantifraude.ca/report-signalez-eng.htm
• https://globalnews.ca/news/11331071/scam-text-messages-canada-smishing