Chase fraud emails: where to forward them and how to spot the fake

Quick answer

Forward a suspicious email that claims to be from Chase to phishing@chase.com, then delete it. Chase is the bank scammers pretend to be. Don't click links or call numbers in the email. If you already acted on it, call Chase using the number on your card.

All scam alerts
Comes by
Email, Text, Phone call
Pretends to be
Chase
Last updated

How it works

Scammers send emails, texts and calls that look like Chase fraud alerts. They say there's suspicious activity, a locked account or a payment to confirm, and give you a link or number to fix it.

The link goes to a fake sign-in page that collects your username, password and codes. The number reaches a scammer posing as Chase's fraud team, who may ask you to read out a one-time code or move money to a "safe" account.

Chase's own guidance is to report phishing emails by forwarding them to phishing@chase.com. If you haven't acted on the message, that's the step to take. If you have, contact Chase directly.

Red flags

  • An unexpected fraud alert that asks you to click a link to sign in
  • A request for your password, card number or a one-time code
  • A sender address that isn't a real Chase domain
  • Urgent wording about a locked account or a payment to cancel
  • A caller who says they're Chase and asks you to move money
  • Links that show a different address when you hover over them

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown sender to me
Chase Alert: We noticed unusual activity on your account and it has been temporarily locked. Confirm your identity now at [link] or call [phone number] to avoid fraud charges.

What to do

  1. 1

    Forward the email to Chase

    If you haven't clicked or replied, forward the message to phishing@chase.com, then delete it.

  2. 2

    Don't click or call back

    Open the Chase app or type the Chase address yourself to check your account. Use the number on the back of your card.

  3. 3

    If you entered your login or a code

    Call Chase right away on the number on your card, change your password and turn on two-step verification.

  4. 4

    If you moved money

    Tell Chase immediately and ask it to stop or recall the payment. Keep the messages and payment details.

  5. 5

    Report it

    Report it to the FTC, and to the Anti-Phishing Working Group if you want to pass it on.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Phishing emails land on addresses scammers have bought or scraped, and they're more convincing with your name on them. Data brokers, people-search sites and breaches are where those details come from. Serus finds where your email, phone number and address are listed and removes them, and alerts you when your details show up in a breach, so fewer scammers can reach you.

More Chase scams

All common Chase scams

Frequently asked

What email address do I forward Chase phishing to?

Chase's guidance says phishing@chase.com. One older version of a Chase page lists a different address, so use the one on chase.com.

Is Chase a scam?

No. Chase is a real bank. Scammers pretend to be Chase.

Should I forward it if I clicked the link?

Still forward it, but call Chase first on the number on your card if you entered any details.

Where else can I report it?

Report it at ReportFraud.ftc.gov. Chase's site also points to the Anti-Phishing Working Group.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.