Before You Click That Fraud Alert Text, Do This Instead

Fraud alerts can quickly notify you of suspicious or unauthorized activity on your bank accounts. But sometimes fraud alerts themselves can be a scam.

Some banks warn of fake fraud alerts in which scammers send you a text that appears to be from your bank warning you of suspicious activity. The text then prompts you to click a link or reply, and eventually share some personal information. While real fraud alerts deserve your attention, you don’t want to click on a false flag. Here’s how you can tell the difference.

Why Fraud Alert Texts Are So Convincing

Scammers use phishing texts to imitate banks, credit card companies, payment apps and other trusted businesses. It can be especially convincing if you already do business with the financial institution that appears to be sending the phishing text. These same fraud alert texts create urgency by saying you must perform a certain action right away to avoid a bad outcome.

These messages may also include company logos to appear more legitimate. Surface-level trust combined with perceived high stakes can cause people to enter their username and password or other credentials on fake websites. The Federal Trade Commission (FTC) warns that phishing texts and emails don’t stop with usernames and passwords. Some scammers focus on account numbers or Social Security numbers instead.

What to Do Instead of Clicking the Link

The best thing to do is to identify a phishing text so you don’t click on the link or share personal information. If you do not click the link, the scammer can’t turn you into a victim. Before clicking any link you receive via text or email, pause for a moment. Is the message pushy and designed to make you perform an action right away?

Instead of replying to the text, you can call the financial institution directly or log in through the official app or website to check for alerts. Do not use the phone number provided in the phishing text. Instead, go to the company’s official website. Some financial institutions will reach out and let you know about fraud alert scams, but it is always a good idea to verify before clicking any links. You should also avoid opening any attachments, and be familiar with how the institution typically contacts you.

A few extra seconds can be the difference between stopping fraud and handing scammers information that could give them access to your money.

What to Do If You Clicked or Shared Information

If you clicked on a link and provided any information like a username and a password, change your password right away. Setting up multi-step authentication for your account can further deter scammers.

You may want to update your security software and run a scan if you suspect malware. You should also monitor your accounts and dispute any unauthorized charges.

You should also contact the financial institution you use about the phishing text so you are both on the same page. You can also visit the FTC’s IdentityTheft.gov page for a recovery plan.

Learn more about our commitment to fraud protection.

This article was written by Marc Guberti from Money and was legally licensed through the DiveMarketplace by Industry Dive. Please direct all licensing questions to legal@industrydive.com.