How to Recognize a Bank Phishing Scam

Learn to spot fake bank emails, texts, and calls before scammers steal your money or personal information.

  1. Check the sender's email address and phone number. Look at the actual email address, not just the display name. Scammers use addresses like "[email protected]" or "[email protected]" instead of official domains. For texts and calls, legitimate banks use short codes (like 62226) or numbers that match what's printed on your debit card or statements.
  2. Never click links or download attachments from suspicious messages. Instead of clicking email links, log into your bank account directly through your browser or official app. Real urgent issues will show up in your actual account dashboard. If you're unsure about a message, call your bank using the number on your debit card or statement — not any number provided in the suspicious communication.
  3. Watch for urgent language and immediate action demands. Phrases like "Your account will be closed in 24 hours" or "Verify immediately or lose access" are red flags. Real banks give you weeks or months to handle legitimate issues, and they communicate through official mail for serious account problems. Scammers create fake urgency to bypass your critical thinking.
  4. Never provide sensitive information through any communication channel. Banks already have your Social Security number, account numbers, passwords, and PINs — they don't need you to "confirm" them. Legitimate requests ask you to log into your account or visit a branch, not to reply with sensitive data. Even if someone calls claiming to be from fraud prevention, hang up and call the bank directly.
  5. Look for spelling errors and generic greetings. Professional bank communications use your actual name and have proper grammar. Messages that start with "Dear Customer" or contain obvious typos are usually scams. However, some sophisticated phishing attempts look nearly perfect, so don't rely on this alone — always verify through official channels.
  6. Report suspected phishing to your bank and authorities. Forward suspicious emails to your bank's official phishing address (most major banks list these on their websites). Report phone scams to the Federal Trade Commission at ReportFraud.ftc.gov. This helps protect other customers and gives authorities data to track scammer networks.