Bank of America scam texts, calls and emails: spot the fake fraud alert

Quick answer

Scammers pretend to be Bank of America's fraud department. Real contact won't ask for your password, a verification code or for you to send money. If a text, call or email worries you, hang up and call the number on the back of your card.

All scam alerts
Comes by
Text, Phone call, Email
Pretends to be
Bank of America
Last updated

How it works

Scammers spoof phone numbers, emails, texts and websites and claim there is fraud or a problem on your Bank of America account. Caller ID and sender names can't be trusted.

The message pushes you to act before you think. Bank of America lists the usual asks: your password, PIN or one-time verification code, a payment in an unusual form such as gift cards or crypto, or a transfer of money "to protect it".

The fake websites often have grammar mistakes, misspellings and awkward design, and the sender's email domain does not match the bank's.

Red flags

  • Unexpected contact that asks for money or personal details
  • Pressure to act right now
  • A request for your password, PIN or verification code
  • Payment by gift card or crypto
  • A fake-looking sender address or website with typos
  • Caller ID that shows the bank's name

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
Bank of America: a payment of $[amount] was attempted on your account. If this wasn't you, call our fraud team at [phone number] or visit [link] to cancel it.

What to do

  1. 1

    Hang up or stop replying

    Don't click links or call back the number in the message.

  2. 2

    Call the bank yourself

    Use the number on the back of your card, a recent statement or visit a branch. Ask whether there's a real problem.

  3. 3

    Forward the message

    Bank of America's pages list abuse@bankofamerica.com for suspicious emails and texts, and you can forward texts to 7726 (SPAM). Check its Security Center for the current address.

  4. 4

    If you shared a code or password, call now

    Use the number on your card, change your online banking password and turn on two-step verification.

  5. 5

    If you sent money, tell the bank immediately

    Ask what can be stopped, then monitor your credit. Our guide on what to do after a data breach covers the next steps.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers who open with your name or the right bank can make a message feel real. They often get those details from people-search sites and breached data.

Serus finds where your phone number, address and email are listed on people-search sites and other data brokers and files removal requests, and it alerts you when your details turn up in a breach. That won't stop every message, but it gives scammers less to work with.

Frequently asked

Will Bank of America text me about fraud?

It can send alerts, but it says it will never ask for your password, verification code or for you to send money. Verify through the number on your card.

What does Bank of America say it will never ask for?

Your password, a verification code, or for you to send money to the bank or anyone else. It won't contact you to ask for your full account number, PIN or Social Security number.

Is Bank of America a scam?

No. It's a real bank. Scammers pretend to be Bank of America.

Where do I report a fake message?

Forward it to the bank's reporting address, report it at ReportFraud.ftc.gov and forward texts to 7726.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.