Fake bank fraud alert texts that ask you to reply YES or NO

Updated October 23, 2026

The fake texts people are getting

Citi Bank Alert : Did you use debit Declined Transaction(s) "05/08" WALMART SUPER-CENTER ATLANTA GA 2-J122867 $600.99 REPLY 1 For YES, REPLY 2 for NO and receive a call from a representative. Data & message rates may apply.

As reported by BBB Scam Tracker (consumer report), May 2025.

Unusual Sign In Detected. […]

As reported by Meredith Village Savings Bank (New Hampshire), January 2025.

How the scam works

A text asks about a charge or a sign-in. It looks like a fraud alert and asks you to reply YES or NO, or 1 or 2. The FTC says fake fraud texts may also give you a number to call.
You reply, and someone calls. The caller says they're from your bank's fraud department. Zelle warns that scammers can spoof calls so they look like they come from your bank.
They ask you to "protect" your money. That means moving it to a "safe" account, sending it to yourself with Zelle, reading back a one-time code, or giving your PIN. The FTC says these scammers pressure people to move money "to supposedly keep it safe." The money goes to the scammer.

How to tell a fake alert from a real one

The phone call is the giveaway. A real bank won't ask you to move money, send money to yourself, read back a code, or tell them your PIN or password.
It gives you a number to call. Use the number on the back of your card or in your bank's app instead.
It names a bank or card you don't have. Scammers send the same text to thousands of people, using the names of big banks.
The link doesn't go to your bank's real website. If there's a link, don't use it. Open your bank's app or type its address yourself.

What banks say they never do

Chase will never ask customers "to move money, send funds to themselves, or help with an investigation," according to FOX 5 DC.
Wells Fargo will never ask customers to send money to fix a problem, reverse a transfer, or protect funds, and its staff won't call asking for PINs, passwords, or one-time codes, according to FOX 5 New York.
The American Bankers Association says banks won't ask for your account number, PIN, or password in a text or email, and will never ask for a one-time login code (as cited by AARP).

The FTC's advice is simple: never send money to anyone in response to an unexpected call or message, no matter who they say they are.

If you replied, talked to them, or sent money

Call your bank now, using the number on your card or in its app. Ask them to stop any transfers, lock your card, and check for changes to your account.
Shared a code or your PIN? Change your online banking password and follow what to do if you gave a scammer a verification code.
Only replied to the text? Nothing is lost yet. Don't answer calls about it, and call your bank yourself if you're worried.

Report it

Forward the text to 7726 (SPAM) so your carrier can block the sender. How to report spam texts on iPhone.
Tell your bank. Some have their own address for this: Bank of America uses [email protected] and Wells Fargo uses [email protected].
Report it to the FTC at ReportFraud.ftc.gov.
If you lost money, also report it to the FBI at ic3.gov. The FBI asks people to include the words "Account Takeover" in these reports.

Questions

Do banks really send fraud alert texts?

Yes. Many banks text you to confirm unusual activity on your card or account, which is exactly why scammers copy them. A real alert never leads to someone asking you to move your money, send money to yourself, read back a one-time code, or share your PIN.

Is it safe to reply YES or NO?

If you aren't sure the text came from your bank, don't reply. Open your bank's app, or call the number on the back of your card, and ask about the charge. In the fake version, a reply is what triggers the scammer's phone call.

Someone from my bank's fraud team called and told me to move my money to a safe account. Is that real?

No. Chase and Wells Fargo have both said they never ask customers to move money to protect it. Hang up and call the number on your card.

I already sent money or shared a code. What now?

Call your bank right away using the number on your card or in its app. Tell them what happened and ask them to stop any transfers and secure your account. If you shared a code, follow what to do if you gave a scammer a verification code.

Sources

Facts checked October 23, 2026.