A text says your bank saw fraud. What do you do?

The problem

A text arrives that looks like it comes from your bank. It says there is suspicious activity on your account, or asks you to reply yes or no to confirm a large purchase. It may give a number to call.

The FTC says that fake bank fraud alerts are among the most reported text scams. The text is only the first step. If you call or reply, someone phones you and tells a detailed story about identity theft. They promise to help, and then ask you to move money or share a code.

How it can happen

The message looks credible because it is short and uses the bank's name. Scammers send it to huge numbers of phones. Many recipients will not bank there, but some will, and those are the ones who respond.

The call that follows is warm and professional. The caller may mention the last digits of a card, which can come from data that has been leaked or sold. They may transfer you to a second person, such as an investigator, to build confidence. The FTC notes that some callers pretend to be a fraud department, using the bank's name and number.

The key request is always the same. They want you to move money to a place they call safe, or to read out a verification code. The FTC states that moving money to protect it is a scam, and that banks never ask for a verification code over the phone.

How to avoid it

1. Leave the text alone. Do not click, call the number in it or reply. Even a short reply tells the sender your number is live.
2. Check through your own channel. The FTC advises contacting your bank through its official app, website, chat or customer service number. Use the number on the back of your card or on a statement.
3. If a caller rings you, hang up and call the bank yourself. Our article on the fraud department call explains what to expect, and hanging up and dialling 159 covers the UK shortcut.
4. Never share a code. If a code arrives that you did not request, someone is trying to reach your account.
5. Report and delete. Forward the text to 7726 (SPAM), use your messaging app's report junk option, and report at ReportFraud.ftc.gov.

If you did reply, click or move money, tell your bank right away and ask what can be done. Bank accounts have fewer protections than credit cards, so money sent to a scammer often cannot be recovered, which is why speed matters. Then read what to do after you shared a code or gave someone access.

Things to watch

• A text that asks for a reply of yes or no to a purchase you did not make.
• A phone number in the text that differs from the one on your card.
• A caller who knows a few details and treats them as proof.
• Pressure to act now, stay on the line or tell nobody.
• A request to move money, withdraw cash or share a code.
• A second caller who joins to sound more official.