Wells Fargo scam texts, calls and emails: how to spot a fake fraud alert

Quick answer

Scammers pretend to be Wells Fargo by text, email or phone. Wells Fargo says it never asks for your password, PIN or one-time access code by email or text. Forward suspicious messages to reportphish@wellsfargo.com, then delete them.

All scam alerts
Comes by
Text, Email, Phone call
Pretends to be
Wells Fargo
Last updated

How it works

Fake Wells Fargo messages claim fraud or a locked account and push you to click a link or call a number. Bank imposters may spoof the bank's name on a text or caller ID.

The goal is usually your sign-in details, a one-time access code or money. A one-time code lets the scammer sign in as you, and a "safe account" transfer moves money out of your reach.

Wells Fargo says it will never ask for your password, PIN or one-time access codes through email or text.

Red flags

  • An unexpected text or email about fraud on your account
  • A link to sign in or verify your details
  • A request for a password, PIN or one-time code
  • A caller who asks you to send or move money
  • A phone number in the message instead of one on your card
  • A sender name that says Wells Fargo but isn't verified

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
Wells Fargo Fraud Alert: a $[amount] charge was flagged on your account. Reply YES to confirm or NO to dispute, or visit [link] to secure your account.

What to do

  1. 1

    Don't click or reply

    If it was a call, hang up.

  2. 2

    Forward it to Wells Fargo

    Wells Fargo asks you to email suspicious texts or emails to reportphish@wellsfargo.com, then delete them.

  3. 3

    Check your account yourself

    Use the number on the back of your card or sign in through the official app.

  4. 4

    If you clicked, opened an attachment or shared a code, call the bank

    Wells Fargo lists a dedicated number for this on its report page. Check that it matches the number on your card or its website before calling.

  5. 5

    Secure your accounts

    Change your password, turn on two-step verification and watch your statements. Our guide on what to do after a data breach covers the next steps.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

A message that names your bank and your phone number feels targeted. Scammers get that kind of detail from people-search sites and breached data.

Serus finds where your phone number, address and email are listed on people-search sites and other data brokers and files removal requests, and it alerts you when your details turn up in a breach. That won't stop every message, but it gives scammers less to work with.

Common Wells Fargo scams

Frequently asked

Where do I send a suspicious Wells Fargo text or email?

Email it to reportphish@wellsfargo.com, then delete it. You'll get an automated reply.

Will Wells Fargo ask for a one-time code?

Not by email or text. Wells Fargo says it will never ask for your password, PIN or one-time access codes that way.

Is Wells Fargo a scam?

No. It's a real bank. Scammers pretend to be Wells Fargo.

What if the message isn't about Wells Fargo?

Report it to the organization it claims to be from, and to the FTC at ReportFraud.ftc.gov.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.