Is the bank "did you make this charge?" text a scam?
YELLOW — be careful
Banks do send these — but scammers spoof them to steal your code. Never act on the inbound contact.
A text or call asking you to confirm a suspicious charge — then to “verify your identity” by reading back a code, clicking a link, or moving money to a “safe account” — is a bank-impersonation scam, even though real fraud alerts exist.
How to tell
- They ask for a one-time code
A real bank never needs you to read back a code it texted you. That code is the key to your account or a money transfer.
- “Move money to a safe account”
No legitimate bank ever tells you to transfer your own money to protect it. This is the classic takeover line.
- Inbound link or transfer
Links or push-payment requests that arrive with the alert are the attack surface.
Is there a real version?
Real fraud alerts just ask you to reply YES/NO to whether a charge was yours — they never ask for codes, passwords, or transfers. If anything feels off, hang up and call the number printed on the back of your card.
What to do
Never share a one-time code or move money. Hang up and call the official number on your card to verify directly.
Got the exact message? Check it now.
Paste your version for an instant RED / YELLOW / GREEN verdict, the reasons, and a safe reply.
FAQ
How do I tell a real alert from a fake one?
Real alerts ask a simple yes/no and stop there. The moment anyone asks for a code, password, or a transfer “to protect your money,” it's a scam.
They called from my bank's real number — how?
Caller ID spoofing makes any number appear. Always hang up and call back the number on your card.