untrappable.Check

Bank of America text scam: is that alert real?

Yes — this is a scam. Bank of America doesn't text you links to “unlock” or “confirm” your account.

Exhibit · Text message

Text Message · Today 8:41 AM
from +1 (218) 555-0182
Bank of America: We've temporarily frozen your account after a $1,750 charge in another state. Confirm it wasn't you here: bofa-secure-verify[.]info/restore

Other versions you might get: A text about a card being locked, a login from a new device, a payment you need to “authorize,” or a code to “stop” a transfer you never made.

Reported versions of this message

Each source below documented a text. Web addresses are defanged, and identifying values may be redacted; the remaining wording follows the source. Similar wording is a reason to check independently, not proof that two messages came from the same sender.

  • “BofA Payment Accepted for $153.48 at PetSmart. Was this you? IF NO, call 800-XXX-XXXX.”
  • “Alert: Your BofA ATM/Debit card has been suspended. Please verify activity immediately by calling 888-XXX-XXXX.”

What to do right now

  1. Don't tap the link or call any number in the text. Don't reply — even “STOP” tells them your number is live.
  2. Check independently. Open Bank of America’s official app or call the number on your card. Review the claimed activity and ask support if it is unclear; a missing alert or transaction does not automatically prove there is no account problem.
  3. If you already tapped or entered details: call Bank of America from the number on your card, change your password and PIN, and watch your account for charges you don't recognize.
  4. Report it. Forward the text to 7726 (SPAM), then file at reportfraud.ftc.gov.
  5. Delete the message.

Reduce the risk of another scam

Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Frequently asked

Does Bank of America send real fraud alerts by text?
Bank of America can send genuine alerts, and scammers imitate them. A sender name, short code, link, or reply prompt alone does not settle authenticity. Do not use a suspicious message’s link or callback number. Open the bank’s app yourself or call the number on your card to check the activity.
How do I report a fake Bank of America text?
Bank of America asks you to forward suspicious texts or emails that use its name to abuse@bofa.com. Also forward the text to 7726 (SPAM) so your carrier can act on the number, then file a report at reportfraud.ftc.gov. Then delete it.
I replied to the text or tapped the link — what now?
If you responded with sensitive information or paid, call Bank of America through the number on your card or statement. Explain what happened and follow its instructions to secure access and review activity. If someone calls afterward, independently verify the caller rather than assuming the call is genuine or fraudulent.

Sources

  1. 01Report suspicious activity— Bank of America
  2. 02How to recognize and report spam text messages— Federal Trade Commission
  3. 03What To Do if You Were Scammed— consumer.ftc.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.