Cyber Safety Today

Is this real? · Shopping and payments

Is that call or text from your bank about suspicious activity real?

The short answer

Do not move money, share codes or tap links. The CFPB says real banks never ask you to send money to protect it. Call your bank yourself on its official number or website to check.

A call, text or email says it is from your bank. It claims there has been a hack, suspicious activity or another problem with your account. The Consumer Financial Protection Bureau (CFPB) says these scams are meant to get your account number or personal information.1

Some go further and tell you to move your money somewhere “safe”. The CFPB says real government agencies and financial institutions do not threaten you or ask you to send money to “protect it”. They do not tell you to withdraw cash, buy gift cards or use cryptocurrency to send money. The CFPB says that is a scam.2

Your bank may really need to reach you about your account. You cannot tell from the call or message itself. Caller ID, text messages and emails can be faked, and voices can be cloned.1 So leave the message alone and contact your bank yourself.1

Here is the kind of text to watch for:

The messageAn example of the pattern, not a real message

[Bank name]: We detected suspicious activity on your account. To protect your money, move it to a secure account today. Confirm your account details here: [link]

How to tell

  • It tells you to move your money to protect it. Real banks do not ask this.2
  • It tells you to withdraw cash, buy gift cards or use cryptocurrency.2
  • It asks for access to your money or financial information, such as your ATM card, bank account, credit card or access codes.3
  • It pushes you to act right away, or plays on your emotions with an urgent problem.3
  • It threatens you.2
  • It sends a link or QR code. These can be faked to look like they come from a trusted source but take you to a scammer’s website.3

A note on payment apps

Scammers use mobile payment apps and wire transfers to steal money. If someone you do not know asks you to send them money, even if they say they are from a government agency, that is a red flag.1 Use payment apps only with people you know and trust. Even then, confirm it is really them before you send money.1 Scammers often ask for payment in ways that are hard to trace or recover, such as wire transfers, gift cards, mobile apps or cryptocurrency.1

What to do

  1. Do not move money, share account numbers or passwords, or tap links in the message.23
  2. Find out whether there is a real problem. Call your bank or credit union using its official phone number or website, one you find yourself, to confirm if there is a real problem.13
  3. Do not send money to someone you do not know.1

If you already sent money or shared details

  1. Contact your bank or the payment company right away. Tell them there may have been an unauthorized transaction.1
  2. Report the scam to the Federal Trade Commission or the FBI’s Internet Crime Complaint Center (links below).2
  3. Contact your local police or sheriff’s office using their non-emergency phone number or website.2
  4. Contact your state attorney general. The National Association of Attorneys General website lists each state’s office.2

Where to report it

  • The FTC. Report it at ReportFraud.ftc.gov.2
  • The FBI. File a complaint with the Internet Crime Complaint Center at ic3.gov. This includes scams involving payment apps.1
  • Your state attorney general and local police.2