You get a text message from an unknown number claiming to be your bank. The message says suspicious activity has been detected in your account; it wants you to click a link to verify your identity. You panic. You want to resolve the issue immediately, and so you click on the link and input your personal information. Next thing you know, a stranger has access to your bank account.

 

Text-message phishing scams (also called “smishing”) are becoming more sophisticated. Cybercriminals now have easy access to AI, which can be used to craft plausible messages from supposedly trustworthy sources such as your bank.

 

While fraudulent texts are dangerous scams, authentic notifications from banks can be useful for letting you know when you have a low funds in your checking account or a high credit card balance. How can you tell if a text message from your bank is real? Read on for tips to detect fake text messages and how to report phishing scams if you get hit by one.

 

How can I tell if a text message from my bank is legit?
If you have agreed to receive text messages from your bank, there is a list of red flags that can help determine whether a banking related text is legitimate.

 

First, banks will never ask for personal or confidential information via text messages. If a message wants to know your PIN code, online credentials or other account information, ignore the message and report it to your bank and the Federal Trade Commission.

 

Most banks take care to explain their policies on a security or privacy page. Banks will “never text, email or call you asking for personal or account information.” Banks will also not ask you to verify your identity by clicking a link.

 

Second, watch for claims of urgency. Scam messages often try to scare people by indicating they need to act quickly to avoid disaster. McGovern says, “they’re expecting you to panic and act immediately. Especially if you see a bank name.”

 

Third, be wary of links that are similar to your bank’s official website but slightly different, such as having an extra hyphen or using the .info domain extension instead of .com.

 

Smishing messages might also ask you to send money or make purchases — banks will never ask you to transfer money via text message. Also watch out for messages that seem too good to be true — your bank won’t send you a prize announcement for a contest you didn’t even know you entered.

 

How should I respond to a text message that looks like it’s from my bank?
No matter what the message from your bank says, it’s best to contact your bank directly before doing anything. McGovern says you should “call your bank directly from the number on the back of your card or the number on their official website, not the number that texted you.”

 

She also advises to “never click on the link that they send.” You should always be able to reach any necessary URLs via your regular bank website.

 

In fact, there’s no need to engage with any text messages from your bank. You should be able to accomplish any necessary tasks by calling your bank or visiting its website.

 

 

Learn More