Scrammer Blog · Bank impersonation
How can I check whether a bank alert is real?
A bank name or familiar caller ID is not enough to prove who contacted you. End the contact and use a route you trust.

A message about suspicious activity can create instant pressure. That is exactly when it helps to slow down. You can protect the account without following the sender's link or staying on the call.
Do not verify the bank through the alert
Do not use a link, callback number, or transfer instructions supplied in an unexpected alert. Caller ID and sender names can be misleading.
Open the bank's official app, type the known website yourself, or call the number printed on the back of your card. Tell the representative what happened and ask whether the alert appears in their system.
Protect codes and passwords
A one-time code can be used to enter an account or approve a transaction. Do not read a code to an unexpected caller. Do not move money to a new account because someone says it is a safe account.
A real employee should not need your full online banking password. If the conversation becomes demanding or secretive, end it.
If money or information was shared
Contact the bank or payment provider immediately through its official route. Explain exactly what happened and ask what protective steps are available. Keep notes about the time, payment method, and actions you took.
Do not pay a second person who promises guaranteed recovery. That can be a separate recovery scam.
The main idea
You do not need to investigate the sender yourself. Pause, verify the claim through a contact route you find independently, and use official help if money or information may be at risk.
Use the private Help FinderSources
- CFPB: Email from a bank asking to verify account informationOfficial guidance about independently contacting a financial institution.
- CFPB: Common types of fraud and scamsAn overview of common financial fraud tactics.
Sources last reviewed September 27, 2026.