Is a bank text asking me to confirm a payment I didn't make a scam?
It could be — fraudsters send fake bank alerts to trick you into calling a spoofed number or clicking a phishing link. Always verify through your bank's official app or card-back number.
Last reviewed: 1 June 2026
Explanation
Scammers send texts that mimic your bank's genuine fraud-alert format. The message claims an unusual payment has been made and asks you to press a key, click a link, or call a number to confirm or cancel it. If you interact, you may be connected to a fake 'fraud team' that guides you into handing over your one-time passcode, or the link installs credential-harvesting malware. Genuine bank fraud alerts do exist, but they will never ask you to share a full password, PIN, or one-time code, and they will direct you to the number on the back of your card — not a number embedded in the text. The safest response is to ignore the text entirely and log in directly through your bank's official app or website to check for any real alerts.
Common red flags
- Text includes a phone number to call or a link to click
- Message asks you to confirm or cancel a payment urgently
- Caller asks for your one-time passcode or full PIN
- The payment amount or merchant looks completely unfamiliar
- Pressure to act within minutes or your account will be frozen
What to do now
- Do not click any link or call any number in the text
- Log in to your bank app directly and check your transactions
- Call the number on the back of your debit or credit card if concerned
- Report the suspicious text to your bank's fraud team
Frequently asked questions
What if the text uses my real name?
Scammers buy personal data from breaches, so knowing your name does not make a text genuine. Always verify through official channels regardless.