The message from your bank about the payment you didn't make

FRAUD ALERT: A payment of $1,249.00 to [some company] is pending on your account. If this was not you, reply NO or call us immediately on [number].

It works on careful people, and that's what makes it different.

It borrows the shape of the real thing. Banks genuinely do send fraud alerts. They genuinely do ask you to confirm. So the message doesn't feel like a trick — it feels like the system working. And it opens with something alarming enough that you stop reading critically: money leaving, right now, to someone you don't recognise.

Then it gives you a number to call. The person who answers is calm, professional, and helpful. They'll walk you through “securing” your account — which means moving your money to a “safe account,” or reading them the code the real bank has just texted you.

Bank impersonators took around $1 billion from Americans in 2025 — the largest single slice of the $3.5 billion lost to imposter scams.

The one rule that beats all of it

Never use contact details that arrived in the message. Not the number, not the link, not the reply. Hang up, and call the number printed on the back of your own bank card.

A real bank will not mind. A scammer cannot survive it.

Three things your bank will never ask you to do

1. Move money to a “safe account.” There is no such thing. That phrase is, on its own, proof of a scam.
2. Read out a code they've just sent you. The code exists to keep them out. Anyone asking for it is trying to get in.
3. Stay on the line while you check. Pressure to not hang up is pressure to not check.