Wells Fargo fraud alert emails and texts: how to spot the fake
Quick answer
A message that says Wells Fargo detected fraud on your account and asks you to click a link or confirm details is a common phishing trick. Wells Fargo is the one being impersonated. Don't click: contact the bank using the number on your card or its official site.
- Comes by
- Email, Text, Phone call
- Pretends to be
- Wells Fargo
- Last updated
How it works
Scammers pretend to be Wells Fargo, which is the victim here, and say they've detected suspicious activity or a problem with your account. The FTC says phishing messages often claim suspicious log-in attempts, a problem with your payment information, or a need to confirm personal or financial details, and none of that is true.
The message pushes you to a link, an attachment or a phone number. A link leads to a fake sign-in page that captures your username, password and one-time codes. A call goes to a scammer who plays a bank "fraud agent".
Wells Fargo's own guidance says it will not contact you to ask for things like PINs, online banking passwords and one-time codes, and that scam emails often come from addresses that don't include wellsfargo.com.
Red flags
- A sender address that doesn't end in wellsfargo.com
- A request for your PIN, online banking password or a one-time code
- A generic greeting
- A link to "verify" or "unlock" your account
- Urgency: your account will be locked
- A phone number in the message to call about the "fraud"
Example message
Wells Fargo Fraud Alert: unusual activity was detected on your account. Your access will be suspended unless you verify your identity now: [link]
What to do
- 1
Don't click or call from the message
Contact Wells Fargo using the number on the back of your card or on the bank's official site, which you type in yourself.
- 2
Forward it to Wells Fargo, then delete it
Wells Fargo asks you to forward suspicious emails to its phishing report address (published on its fraud page) and then delete them. Wells Fargo notes some forwards may be rejected, in which case just delete the message.
- 3
If you clicked, entered details or sent money
Call Wells Fargo's fraud line right away, using the number on your card or the bank's official fraud page. Change your online banking password and anywhere you reused it.
- 4
Watch your accounts
Review statements, turn on multi-factor authentication and consider a credit freeze. Our guide on what to do after a data breach covers the steps.
- 5
Report it
Report the message to the FTC at ReportFraud.ftc.gov. Forward phishing emails to the Anti-Phishing Working Group and texts to SPAM (7726).
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers send bank alerts to huge lists, but some arrive with your name, because contact details leak through breaches and sit on people-search sites. A message that fits your real bank feels more believable.
Serus finds where your email, phone number and address are exposed and removes them where it can, and alerts you when your details appear in a breach.
More Wells Fargo scams
Frequently asked
Is Wells Fargo sending these emails?
No. Scammers pretend to be the bank. Wells Fargo says it won't ask you for PINs, online banking passwords or one-time codes.
How can I check if a fraud alert is real?
Don't use the message's links or numbers. Open the bank's app or type its address yourself, or call the number on your card.
What if I already clicked the link?
Contact the bank through a number you trust, change your passwords and review your recent transactions.
Where do I report it?
Forward it to Wells Fargo's phishing report address from its fraud page, and report it to the FTC at ReportFraud.ftc.gov.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
