untrappable

Bank of America text scam: is that alert real?

Editorially reviewed · Last updated July 23, 2026

Yes — this is a scam. Bank of America doesn't text you links to "unlock" or "confirm" your account.

Text Message · Today 8:41 AM
from +1 (218) 555-0182
Bank of America: We've temporarily frozen your account after a $1,750 charge in another state. Confirm it wasn't you here: bofa-secure-verify.info/restore
The Text message, as received

Other versions you might get: A text about a card being locked, a login from a new device, a payment you need to "authorize," or a code to "stop" a transfer you never made.

Word-for-word versions going around

Each of these is a real text, quoted exactly as people received it. If yours matches one — even loosely — it’s the same scam.

  • “BofA Payment Accepted for $153.48 at PetSmart. Was this you? IF NO, call 800-XXX-XXXX.”
    Documented by MalwareTips · June 2025
  • “Alert: Your BofA ATM/Debit card has been suspended. Please verify activity immediately by calling 888-XXX-XXXX.”
    Documented by MalwareTips · June 2025

What to do right now

  1. Don't tap the link or call any number in the text. Don't reply — even "STOP" tells them your number is live.
  2. Check your account the safe way. Open the Bank of America app yourself, or call the number on the back of your card. If there's a real problem, it'll show there.
  3. If you already tapped or entered details: call Bank of America from the number on your card, change your password and PIN, and watch your account for charges you don't recognize.
  4. Report it. Forward the text to 7726 (SPAM), then file at reportfraud.ftc.gov.
  5. Delete the message.

How to make sure it never bites you

You got this because your number is on a list scammers buy and resell — it has nothing to do with your actual bank. Get it removed and put a layer between you and them — see how to stop spam texts for good.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

Does Bank of America send real fraud alerts by text?
Yes — which is exactly why the fake ones work. The difference is what the message asks you to do: a real alert points you to the app or the number on your card, while the fake one carries a link to “unlock” or “verify” your account. The FTC's warning about these texts is blunt: scammers “say they've noticed some suspicious activity on your account — but they haven't.” Whatever the text says, check by opening the Bank of America app yourself or calling the number on the back of your card — never through the text.
How do I report a fake Bank of America text?
Bank of America asks you to forward suspicious texts or emails that use its name to abuse@bofa.com. Also forward the text to 7726 (SPAM) so your carrier can act on the number, then file a report at reportfraud.ftc.gov. Then delete it.
I replied to the text or tapped the link — what now?
Bank of America's own guidance: “If you responded to a suspicious call, text or email, call the number on your card or bank statement.” Do that first — the bank can watch the account, replace the card, and reset your access. Change your online-banking password too. And if someone calls you back claiming to be the fraud department, hang up and dial the card number yourself — the follow-up call is part of the scam.

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.