What are the specific signs that a message claiming to be from a bank is actually a scam?

✓ Accepted answer

Real banks never rush you, threaten you, or ask for your password by phone or text.

• Check the sender address and domain. Legitimate institutions use official, recognisable domains (e.g., yourbank.co.uk or yourbank.com). Scammers often use lookalike domains with extra characters, misspellings, or unusual country-code endings. Hover over links to preview the true destination before clicking.
• Look for urgency and threats. Phishing messages frequently demand immediate action, claim your account will be closed, or reference a fake legal notice. Genuine banks, including HMRC and US regulators, will not pressure you with strict deadlines or threats of arrest to extract information quickly.
• Verify the call or message independently. Never click links in unsolicited texts or emails. Instead, dial the customer-service number printed on your bank card or official website. In the US, check recent complaints on the Federal Trade Commission’s consumer site; in the UK, report suspicious activity to the National Cyber Crime Unit.
• Watch for requests for sensitive data. No legitimate bank will ask for your password, one-time TAN codes, or full card details via phone, email, or SMS. Bank Austria explicitly warns customers that fraudsters send fake login requests; if a message asks you to confirm a transaction or update your details, treat it as suspicious.
• Be wary of unexpected social media contact. Banks are increasingly active on platforms like Facebook and Instagram, but customer support does not initiate account verification through direct messages. If a “bank” contact reaches out on social media asking for personal info, it is likely a scam.

admin · 2026-10-09 14:37:07