Fake Chase no-reply alert emails: how to spot them
Quick answer
An email or text that looks like a Chase alert, even from a no-reply address, can be fake. A display name proves nothing. Check the full sender address, don't use the links, and open the Chase app or type the website yourself. Chase says it won't ask for your password or PIN by email or text.
- Pretends to be
- Chase
- Last updated
How it works
Scammers send emails that mimic a Chase security alert: a new login, a locked account or a payment you didn't make. The sender often shows a bank-like display name, and no-reply addresses are easy to fake because nobody expects to reply.
The email asks you to click a link, open an attachment or fill in a form. The FTC says legitimate companies won't email or text with a link to update your payment information, and that real messages don't need you to confirm personal or financial information through a link.
Chase advises checking the full sender address instead of the display name, hovering over links to see where they go, and watching for look-alike domains with extra letters or numbers, urgency, threats and typos. The link goes to a page that copies the bank's sign-in and collects your username, password and codes.
Red flags
- An alert you didn't expect, with a link to sign in
- A sender address with extra letters or numbers, or a personal-looking domain
- A display name that says Chase, but a different actual address
- Urgent or threatening wording
- A request for your password, PIN or account details by email or text
- Typos or an attachment you didn't ask for
Example message
Chase Alert: We've temporarily limited your account after unusual activity. Sign in to verify your identity within 24 hours: [link]. Do not reply to this message.
What to do
- 1
Don't click anything
Leave the links and attachments alone. If you are suspicious of an email or text, Chase says not to click links or attachments.
- 2
Check your account directly
Open the Chase app or type the Chase website into your browser. Or call the number on the back of your card, not one in the message.
- 3
If you entered your sign-in details
Change your Chase password right away, then change it anywhere else you use it, and call the number on your card to report it.
- 4
If you shared card or account numbers
Ask for a replacement card and review your recent transactions for anything you don't recognize.
- 5
Protect other accounts
Turn on multi-factor authentication and see what to do after a data breach for more steps.
- 6
Report the email
Forward suspicious emails to the abuse address Chase publishes on its security page and report it to the FTC.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Fake bank alerts go to people who really bank with Chase, and some use your name or the last digits of a card. Names, emails and phone numbers from data breaches and people-search sites make the guess easy. Serus finds the data brokers and people-search sites that list your name, address and phone number and sends the removal requests, and it alerts you when your details show up in a breach, so fewer scammers can reach you.
More Chase scams
Frequently asked
Does Chase send emails from no-reply addresses?
Whether a sender is a no-reply address doesn't tell you if it's real. Check the full address, avoid the links and log in through the app or website instead.
Is Chase a scam?
No. Scammers pretend to be Chase. Chase publishes guidance on how to recognize suspicious emails and texts.
Will Chase ask for my password by email?
Chase says it won't ask for your user name, password, PIN or other account information by text or email, or over the phone unless you called about an issue.
What if I clicked the link?
Don't enter anything. If you did, change your password and call the number on your card.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
