Chase phishing emails and texts: how to spot the fake
Quick answer
Emails, texts or calls that claim to be Chase and ask you to confirm account details or click a link are phishing. Chase says to reach it only through its mobile app or chase.com. Don't click, call the number on your card, and report it to the FTC.
- Comes by
- Email, Text, Phone call
- Pretends to be
- Chase
- Last updated
How it works
Scammers pretend to be Chase by email, text or phone and ask you to confirm or provide personal or account information. The message usually claims there is fraud on your account, a payment problem or a locked login.
The link leads to a fake sign-in page that copies Chase's. What you type goes to the scammer, who then logs in to your real account. Callers may also ask for security codes sent to your phone.
Chase is the company being impersonated. Its fraud guidance says to only access Chase through its mobile app or www.chase.com, and never to transfer money to someone's account because they say it's urgent or needed for protection.
Red flags
- A message about "suspicious activity" with a link to confirm details
- A login page you reached by clicking a link in a message
- A caller asking for the security code Chase just texted you
- Urgent demands to move money to a "safe" account
- Threats that your account will be closed unless you act now
- A sender or link that doesn't match chase.com exactly
Example message
Chase alert: unusual activity was detected on your account. To avoid a lock, verify your details now at [link] or call [phone number].
What to do
- 1
Don't click or call anything in the message
Open the Chase mobile app or type the address into your browser yourself.
- 2
Never share security codes
Chase's guidance says never share them. A real employee won't ask for a one-time code.
- 3
Call Chase on the number on your card
Ask whether there's a real problem on your account.
- 4
If you entered details or moved money, call Chase now
Tell them it was fraud, ask them to lock the account and stop any transfers. Change your password and turn on two-step verification.
- 5
Consider a credit freeze if identity details were shared
Freezing your credit with the three bureaus is free.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers send phishing in bulk, but the convincing ones use your name, email and phone number. Those details are often on people-search sites and in breach data. Serus finds where your details are listed and removes them, and alerts you when they show up in a breach, so fewer scammers can target you directly.
More Chase scams
Frequently asked
Is Chase sending these messages?
No. Scammers pretend to be Chase. If you're unsure, use the Chase app or the number on your card.
How do I check a message is real?
Don't use anything in the message. Sign in through the app or chase.com and look for alerts there.
I clicked but entered nothing. Am I safe?
Probably, but close the page, and run a malware scan if the link downloaded anything.
Where do I report it?
ReportFraud.ftc.gov. Check Chase's site for its own reporting address.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
