Filed under: Banks, tax & authorities

Is this "unusual activity on your account, verify now" bank text a scam?

Almost certainly. Banks do send fraud alerts, but they don't send you a link to "verify" your login or card details, and they don't threaten to freeze your account in an hour. The link leads to a look-alike login page that harvests your credentials.

Part of our guide: How to recognize a bank-impersonation scam →

Got a message like this? Paste it here →

The check runs in your browser. What you paste stays on your device. It is not sent to our servers or anyone else, and nothing is stored.

The image is read on your device. It is never sent or stored.

Please don't paste other people's personal data.

Or check it on Telegram

The exhibit
EXHIBIT · CHECK BEFORE YOU ENTER YOUR PASSWORD.
Received via: SMS EN
ALERT: unusual activity detected on your account. Verify your identity within 60 minutes to avoid a temporary freeze: secure-bank-verify.exampleunexpected domain, verify where it really leads

Illustrative example of the pattern, not a real message someone received.

How to verify it yourself

  • Call the bank using the number on the back of your card, never the number or link in the message.
  • Banks don't ask you to confirm full card numbers, PINs, or passwords by text.
  • A countdown to a "freeze" is manufactured urgency.
  • Log in only by typing the bank's address yourself or using its official app.

Source: FTC, How To Recognize and Avoid Phishing Scams