How to Spot a Fake Bank Text Before It Fools You
Scammers send millions of texts every day that look exactly like messages from real banks. The difference between spotting one and falling for one often comes down to knowing three specific things to check.
Your parent’s phone buzzes. The message reads: “Chase Bank Alert: Unusual sign-in detected on your account. Your access has been temporarily limited. Tap here to verify your identity and restore access.” It looks official. It came from a number labeled “Chase.” And it’s completely fake.
This is the fake bank text scam — also called a bank impersonation smish — and it is currently one of the most reported and most financially damaging scam types reaching older adults. According to the FTC, consumers lost $470 million to text scams in 2024, more than five times what was reported in 2020. Fake bank alerts are among the top performing lures in that category, precisely because they combine the authority of a trusted institution with the urgency of a financial emergency.
This guide shows you exactly how these texts are constructed, what specific details to look for, and what to tell your parent the moment one lands on their phone.
How Big the Fake Bank Text Problem Really Is
Text scams have grown faster than almost any other fraud category. Understanding the scale helps explain why a single unconsidered tap can be so costly.
The numbers that matter most for your parent aren’t the aggregate totals — they’re the per-victim figures. Adults in their 70s reported a median fraud loss of $1,000 per incident to the FTC in 2024, compared with $417 for adults in their 20s. For business impersonation scams — the category that includes fake bank alerts — losses of $10,000 or more increased more than fourfold among older adults between 2020 and 2024. The FTC’s data shows that when these scams succeed against older victims, the amounts involved are far larger than most people realize.
“The seismic growth of reported fraud continues unabated. The impact on older adults is often catastrophic.” — Kathy Stokes, Director of Fraud Prevention Programs, AARP Fraud Watch Network
What a Fake Bank Text Actually Looks Like
Below is a typical fake bank text scam message — the kind that reaches millions of phones every day. Every element is deliberate. Reading it with annotations makes the manipulation visible.
To restore full access, verify your identity within 24 hours:
chase-secure-verify.com/auth?id=7842
Three structural elements appear in virtually every fake bank text: a claim of suspicious or unauthorized activity, a time-limited threat to the account, and a link or callback number that routes to the scammer. None of these elements are how real banks communicate genuine security concerns.
What Happens After the Tap
The text is only the first contact. What follows depends on which path the scammer has set up — and each one leads to the same destination.
Real Bank Text vs. Fake Bank Text: The Exact Differences
This table covers what legitimate banks actually do and do not do by text — so your parent has a clear reference before the next message arrives.
| What the text does | Real Bank Text | Fake Bank Text |
|---|---|---|
| Contains a clickable link | ✓Links go to the bank’s official domain only (e.g., chase.com, bankofamerica.com) | ✗Links go to lookalike domains (e.g., chase-secure-verify.com, alert-bofa.net) |
| Asks for password or PIN | ✓Never. Real banks never request passwords via text under any circumstances | ✗Always. The form or fake rep will request credentials to “verify identity” |
| Threatens account closure | ✓No — real alerts inform you of activity, they do not threaten deadline consequences | ✗Yes — “your account will be closed in 24 hours” is a manufactured pressure tactic |
| Asks you to call a number in the text | ✓No — official bank numbers are on the back of your card and the bank’s website, not in alerts | ✗Yes — the number routes to a scammer posing as a fraud specialist |
| Requests Social Security number | ✓Never via text. Identity verification happens through secure authenticated channels | ✗Common — “last 4 of your SSN” is used to either steal identity or build false trust |
| Comes from a short code or your saved number | ✓Legitimate alerts often use registered short codes (5–6 digit numbers) you have saved | ✗May spoof the display name or use a random long number mimicking a local area code |
The Seven Red Flags — Print This for Your Parent
These are the specific signals that separate a fake bank text from a real one. Every signal can be checked in under thirty seconds before taking any action.
Exactly What to Do When the Text Arrives
Two Texts, Two Outcomes
Here is what these four steps look like in practice — and what happens without them.
Your Parent’s Fake Bank Text Checklist — Save This
Print this checklist or share it by text with your parent. It covers every step from receiving a suspicious message to reporting it.
Do not tap any link or call any number in the text
This is the single most important rule. Even previewing the link (without tapping) on some older phones can trigger a download. Close the message first.
Check the URL domain before doing anything else
On most phones, pressing and holding a link previews the URL without opening it. If the domain is anything other than the bank’s official address, it’s a scam — regardless of what the display text says.
Go directly to your bank — through the app or the card
Open the bank’s official app yourself, or call the number printed on the back of your debit or credit card. Never use contact information provided in the suspicious text.
Remember: real banks never ask for passwords or PINs by text
No legitimate fraud alert will ever ask you to confirm your full password, PIN, or Social Security number via a text message link or a phone call prompted by a text. That request alone confirms it is a scam.
Report it — two simple ways
Forward the text to 7726 (spells SPAM) — all major US carriers accept this and use it to block scam numbers. Also file a report at ReportFraud.ftc.gov. Your report helps stop the same scam from reaching others.
If you already clicked: act immediately
Call your bank directly using the number on your card — not any number you find online after clicking the link. Freeze your card, change your online banking password, and ask the bank to flag your account for monitoring. Time matters: the faster you act, the better the chance of stopping or reversing a transfer.
Stay current on new fake bank text variants
Scammers update their messages constantly — switching bank names, adjusting the urgency language, and rotating link domains. A weekly alert that tracks new smishing variants is the most reliable way to recognize the next one before it lands.
Frequently Asked Questions
Sources
- Federal Trade Commission — New FTC Data Show Top Text Message Scams of 2024; Overall Losses to Text Scams Hit $470 Million. April 2025. ftc.gov
- Federal Trade Commission — False Alarm, Real Scam: How Scammers Are Stealing Older Adults’ Life Savings. August 2025. ftc.gov
- AARP / Christina Ianzito — $12.5 Billion Lost to Scams and Fraud in 2024, Older Adults Hit Hard. March 2025. aarp.org
- Federal Trade Commission — FTC Issues Annual Report to Congress on Agency’s Actions to Protect Older Adults. December 2025. ftc.gov
- Axis Intelligence — Phishing Statistics 2026: Email, SMS & Social Attacks. 2026. axis-intelligence.com
Know the Next Scam Text Before Your Parent Gets It
Family Scam Shield sends a plain-language weekly alert covering the exact scam texts and calls targeting families right now — including new fake bank alert variants and the specific domains scammers are currently using.
- ✅ Weekly briefings in plain language — no jargon, no tech knowledge needed
- ✅ Real-time alerts on new smishing and fake bank text variants
- ✅ Easy-to-share summaries you can forward to your parent in one tap
Cancel anytime.