"Potential fraud" calls: how to tell a fake bank fraud alert

Quick answer

A call or text saying your bank has spotted fraud and asking you to confirm details, share a code or move money is likely a scam. Hang up, then contact your bank using the official app or the number on your card. A real fraud department won't tell you to keep it secret.

All scam alerts
Comes by
Phone call, Text
Pretends to be
Your bank
Last updated

How it works

You get a call, robocall or text that says there was suspicious activity on your account, often a large purchase, and asks you to act. The message may ask you to "press 1 if this wasn't you".

The FTC says to ask which bank or company is calling and what the problem is, then end the call and contact the institution yourself. The scammers want account details, verification codes, remote access to your device or a transfer of money.

The bank is the organization being impersonated. These calls aren't from your bank's fraud team.

Red flags

  • An unexpected call or text about fraud on your account
  • A request for account details or verification codes
  • A request for remote access to your phone or computer
  • Being told to keep the call secret
  • Pressure to move money to a "safe" account

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
This is the fraud department at your bank. We've flagged a large purchase on your card. Press 1 if this wasn't you, or call [phone number] now to secure your account.

What to do

  1. 1

    Hang up

    Don't press buttons or call back a number from the message.

  2. 2

    Contact your bank yourself

    Use the official app or website, or call the number on a recent statement or the back of your card. Don't rely on search results, since scammers buy ads so fake numbers show up at the top.

  3. 3

    Never share codes or give remote access

    No legitimate fraud department will ask for a verification code or access to your device.

  4. 4

    If you shared details or moved money

    Call your bank at once, change passwords and turn on two-step verification. Our guide on what to do after a data breach covers the next steps.

  5. 5

    Report it

    Report the call or text to the FTC.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Scammers who know your bank or your last few card digits sound far more convincing. Names, phone numbers and addresses like these are easy to buy or look up on people-search sites, and they show up in data breaches. Serus finds the data brokers and people-search sites that list you and removes you from them, and alerts you when your details appear in a breach, so fewer scammers can reach you.

Frequently asked

Would my bank ask me to keep a fraud call secret?

No. The FTC says no legitimate fraud department will tell you to keep a call a secret.

Can I trust the number on caller ID?

No, numbers can be spoofed. Hang up and call the number on your card or statement, or use the bank's app.

What if I already gave them a code?

Call your bank straight away using an official number and tell them. Then change your passwords.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.