Banking Fraud Guide
Bank Phishing Text Scam
Bank phishing texts (smishing) are the fastest-growing scam in the UK and US. They pretend to be from your bank's fraud team to trick you into approving payments — to the scammer.
What is this scam?
A bank phishing text scam impersonates your bank — Barclays, HSBC, Lloyds, Chase, Wells Fargo, and others. The message typically claims a payee has been added or a payment is pending, urging you to "cancel" by clicking a link or calling a number. The link leads to a fake login page. The phone number routes to a scammer pretending to be the fraud team, who then "moves your money to a safe account" — actually theirs.
Common warning signs
- Text claims a new payee or large payment is pending
- Pressures you to call a number or click a link immediately
- Sender ID looks legitimate — scammers spoof bank shortcodes
- Link goes to a non-official domain (barclays-verify.online)
- Caller asks you to move money to a 'safe account'
- Asks for your full PIN, password, or one-time codes
- Threatens account closure, arrest, or loss of funds
Realistic scam examples
Fake new payee alert
BARCLAYS ALERT: A new payee 'JOHN T' was added at 02:14 AM and a payment of £1,840.00 is pending. If this was NOT you, cancel: secure.barclays-verify.online or call 0203 488 1199. Code: 884-291.
Fake card lockout
Chase: Your debit card ending 4421 has been locked due to suspicious activity in TX. Reactivate within 12 hours: https://chase-reactivate-card.com/verify
How to stay safe
- Never call numbers or click links in bank texts — use the number on the back of your card.
- Your bank will NEVER ask you to move money to a 'safe account'. That is always a scam.
- Never share full PINs, passwords, or one-time codes with anyone — even 'staff'.
- If you've been called by 'your bank', hang up and call back from your card on a different phone (or wait 5 minutes — scammers can hold the line open).
- Report scam texts by forwarding to 7726 (works in UK and US).
Not sure if a message is a scam?
Paste it into our free AI scam checker for an instant analysis.
Frequently asked questions
Do banks send fraud texts?
Yes — but legitimate fraud alerts ask you to log into your app or call the number on your card. They never include clickable links or threaten immediate action by text.
How do phishing bank scams work?
The text creates panic. You click the link or call the number, talk to a 'fraud advisor' who sounds professional, and are convinced to authorise transfers, share codes, or install remote access software.
Can scammers spoof bank phone numbers?
Yes. Caller ID and SMS sender ID can both be spoofed so messages appear in the same thread as real bank texts. Never trust the number alone — always call back via your card.
What should I do if I sent money to a scammer?
Call your bank immediately on the number on your card and request a fraud recall. Report to Action Fraud (UK) or the FTC (US). The faster you act, the more chance of recovery.