Chase credit card fraud calls and texts: how to tell a real alert from a fake

Quick answer

Scammers pretend to be Chase's fraud department with a fake alert about a charge. Chase says it won't ask for your password, PIN or account details by text, email or phone unless you called. Hang up and call the number on the back of your card.

All scam alerts
Comes by
Phone call, Text, Email
Pretends to be
Chase
Last updated

How it works

Chase is a real bank and a victim here: scammers copy how its fraud alerts look and sound.

A typical script starts with a text or call about a "suspicious charge" on your card. The caller says they're from the fraud department and asks you to confirm details: your login, a one-time code sent to your phone, or the security code on the card. The FTC describes the same pattern for bank impersonators, whose goal is to get you to move money or hand over account access.

Chase says it won't ask for your user name, password, PIN or other account information by text, email or phone unless you called it about an issue. A one-time passcode is only for you to enter yourself. Reading it back to a caller can let them approve a sign-in or a purchase.

What they're after is your money, your login or your card details.

Red flags

  • An unexpected call or text about a charge, asking you to confirm account details
  • A request for your password, PIN, one-time code or card security code
  • Pressure to act in minutes or to keep the call going
  • A link in a text that leads to a login page
  • A caller who wants you to move money to a "safe account"
  • An email from a sender address that isn't a real Chase domain

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
Chase fraud alert: we detected a charge of $[amount] on your card. If this wasn't you, reply NO or call [phone number] now to secure your account. Visit [link] to verify.

What to do

  1. 1

    Hang up or ignore the text

    Don't reply, don't click the link and don't call the number in the message.

  2. 2

    Call Chase yourself

    Use the number on the back of your card, or open the Chase app, and ask whether there's a real alert.

  3. 3

    If you gave a code, password or card details

    Call Chase right away, change your password and ask them to secure the account and replace the card.

  4. 4

    If you moved money

    Tell your bank immediately that it was fraud. Save the texts, call times and payment details.

  5. 5

    Forward what you got

    Chase says to forward suspicious emails to phishing@chase.com and suspicious texts to 7726 (SPAM).

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers don't pick targets at random. They buy or look up names, phone numbers, email addresses and home addresses from people-search sites and from breach dumps, then use them to make a message feel personal. A caller who already knows your name, that you have a Chase card and maybe your address sounds far more convincing. Serus finds the data brokers and people-search sites that list you where you live and removes you from them, and it alerts you when your details show up in a breach, so fewer scammers can reach you.

More Chase scams

All common Chase scams

Frequently asked

Will Chase ever ask for my password or PIN?

Chase says it won't ask for your user name, password, PIN or other account information by text, email or phone unless you called about an issue.

Is a text with a fraud alert always fake?

No. Real alerts exist, so don't judge by the text alone. Verify through the app or the number on your card.

Should I read my one-time code to a caller?

No. Never share a one-time passcode with anyone, even someone who says they're from your bank.

Where do I forward a suspicious email?

Chase says to forward it to phishing@chase.com. Forward suspicious texts to 7726.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.