Fake Ally Bank fraud department calls: how to check before you act
Quick answer
Scammers pretend to be a bank's fraud department, including Ally's. If a caller says your account is at risk and asks you to move money or read out a code, hang up. Call the number on your card or in your Ally account instead, never one the caller or a search result gives you.
- Comes by
- Phone call, Text, Email
- Pretends to be
- Ally Bank
- Last updated
How it works
Ally Bank is the company scammers copy here. It's not the scammer. These calls follow a script the FTC sees across many banks.
The call or text says there's suspicious activity on your account. Caller ID can be faked, so it may show a bank name or a number that looks right. The caller then asks you to confirm your identity, read out a verification code sent to your phone, or move your money to a "safe account" to protect it.
The FTC says a fraud-department caller who tells you to shift funds is running a scam, and no real caller will ask for your verification code. Scammers sometimes follow up with a second caller who claims to be from the FTC or the police to make the first call look real.
What they're after is your login, a one-time code, or a transfer you make yourself.
Red flags
- An unexpected call or text about fraud on your account that pushes you to act now
- A request to read out a verification code sent to your phone
- A request to move money to a "safe" account or buy gift cards
- Caller ID that shows your bank's name or number: it can be faked
- A request to keep the call secret from the bank's staff or your family
- A link in a text that asks you to log in
Example message
This is the fraud prevention department at your bank. We've flagged a large charge on your account. To stop it, I need you to read me the code we just texted you, then move your balance to a protected account while we investigate. Call [phone number] if we get disconnected.
What to do
- 1
Hang up and call the bank yourself
Use the number on the back of your card or in your logged-in Ally account. Don't call back the number that called you, and don't trust a number from a search result.
- 2
Never share a code or move money on request
A real bank doesn't need your verification code to protect you. If you're unsure whether a call was real, ask your bank.
- 3
If you shared a code or logged in, act now
Call your bank on the number you looked up, tell them what you shared, and change your password. Turn on multi-factor authentication.
- 4
If you moved money, tell your bank right away
The sooner the bank knows, the better the chance of stopping a transfer. Ask about freezing the accounts involved.
- 5
Watch your credit and other accounts
If you gave out your Social Security number or other details, consider a credit freeze and check your statements.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers often know your name, phone number and sometimes which bank you use before they call, which is why the story sounds real. They get these details from people-search sites and data breaches. Serus finds where your phone number and address are listed and removes them, and alerts you when your details show up in a breach, so fewer scammers can reach you with a convincing script.
More Ally Bank scams
Frequently asked
Is there a number to verify an Ally fraud call?
Use the number on the back of your card or inside your Ally account. Ally's Security Center page is the place to find its published guidance. Don't rely on a number from the caller.
The caller ID says Ally. Is it real?
Not necessarily. The FTC notes that caller ID can be faked. Hang up and call the number you look up yourself.
Will my bank ever ask for my verification code?
The FTC says no real caller from your bank's fraud department will ask for it.
Am I liable if someone steals money from my Ally account?
Ally's Security Center says it guarantees you won't be liable for unauthorized online or mobile transactions if you report them within 60 days of the statement. Authorized transfers you make yourself may be treated differently, so call your bank.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
