Is that Bank of America text real?

Company check · Updated October 11, 2026

Bank of America really does send security alerts by text, so a text that mentions Bank of America isn't automatically fake. That's exactly why scammers borrow the name. What gives a scam away isn't the logo or the sender. It's what the message asks you to do next.

This page sticks to what Bank of America says on its own security pages, plus the FTC's guidance, so you can check a message in a couple of minutes.

What the fake texts look like

Bank of America warns that it's seeing more scammers “using advanced technology to convincingly pose as banks.” They may spoof real phone numbers, emails, texts or websites and claim there's fraud or a problem with your account, to pressure you into sharing personal information or moving money. One growing version, the bank says, has criminals posing as the bank and government agencies, claiming an employee who worked on your account is under investigation and your money must be moved to a “new” or “safe” account. (Bank of America)

The text is usually just the opening. If you reply, a “fraud specialist” calls, and caller ID may look right. The caller asks for your password or the one-time code the bank just sent you, or walks you through moving money to “protect” it.

The one fact that settles it

Bank of America won't ask for your password or code, or ask you to send money. In the bank's words: “Bank of America may ask you to confirm account activity, but we will never ask for your password, verification code, or for you to send money to us or anyone else in conjunction with that request.” (Bank of America) It also says it “will not reach out and ask for personal information with a request to withdraw, send or move money.” (Bank of America) If a text, or the call that follows it, ends with you sharing a code or sending money, it isn't Bank of America.

How to check if it's really Bank of America

1. Know what real alerts do. Bank of America says it sends timely fraud alerts by mobile app, text, email or phone, and that security alerts go out automatically when there's unusual activity or certain account changes, like a change of address. (Bank of America, Bank of America) A real alert tells you about activity. It doesn't need your password or a code from you.
2. Check your account yourself. Open the Bank of America Mobile Banking app or type bankofamerica.com into your browser, and look for the charge or alert there. Don't use a link in the text.
3. Call the number on your card or statement. The bank's advice: “If you're unsure about a communication, do not respond. Instead, contact us directly using the number on your card or statement.” (Bank of America)
4. If someone calls you, hang up and call back. Bank of America says to hang up if a communication seems fraudulent and mentions the bank, then contact it using the number on the back of your card, a recent statement, or by visiting a branch. (Bank of America) Caller ID doesn't prove anything; the FTC notes that “caller ID can be faked.” (FTC)

One nuance: Bank of America says it's required by law to keep customer information up to date, so it may occasionally contact you by letter, call, text or email to confirm or update your details. Even then, it says to confirm the request through a verified Bank of America channel, not contact details in the message. (Bank of America)

Signs it's fake

These are red flags Bank of America lists itself:

• Asks for your password, PIN or a one-time verification code. (Bank of America)
• Tells you to move money outside your existing accounts, or to buy gift cards or cryptocurrency. (Bank of America)
• Pushes you to act immediately or keep it confidential. (Bank of America)
• Tells you not to trust Bank of America employees, to ignore warning messages, or coaches you on what to say, including to lie. (Bank of America)
• Wants payment in an unusual way, such as a wire transfer, gift cards, gold, cryptocurrency or pre-loaded debit cards. (Bank of America)
• Threatens legal action or the police. (Bank of America)
• Has a link that isn't bankofamerica.com: extra words, odd endings or a shortened link.

What to do

1. Don't reply, tap a link or call a number in the text. Even a “no” tells the sender your number is live and invites the follow-up call.
2. Check your account in the Bank of America app or on bankofamerica.com, which you open yourself.
3. Call Bank of America using the number on your card or statement if anything looks wrong.
4. Report it. Bank of America asks you to forward suspicious emails or texts that use its name to abuse@bofa.com, and to forward a suspicious text to your cell phone provider at 7726 (SPAM). (Bank of America) You can also report it at ReportFraud.ftc.gov. Our guide on how to report a scam text covers every option.
5. Delete it.

If you already paid or clicked

• You replied, clicked or shared anything: Bank of America says that if you responded to a suspicious call, text or email, call the number on your card or bank statement. (Bank of America)
• You see charges or transfers you didn't make: Bank of America lists 800-432-1000 for ATM, debit, check and Zelle issues, 800-732-9194 for consumer credit cards, and 877-337-8357 for wire transfers. You can also lock a debit card in the Mobile Banking app or Online Banking. (Bank of America)
• You sent a Zelle, Cash App or Venmo payment: report it to the payment app right away and ask them to reverse it. If you paid with a gift card, call the card issuer and ask for a refund. (FTC)
• You shared your Social Security number or other identity details: go to IdentityTheft.gov for steps to protect yourself. (FTC)

Common questions

Does Bank of America send fraud alert texts?

Yes. Bank of America says it sends fraud alerts by app, text, email or phone when it sees unusual activity. But scammers can spoof the bank's texts and phone numbers, so if you're unsure, don't respond. Call the number on your card or statement.

Will Bank of America ever ask for the code it texted me?

No. Bank of America says it may ask you to confirm account activity, but it will never ask for your password, verification code, or for you to send money to the bank or anyone else.

How do I report a fake Bank of America text?

Forward it to abuse@bofa.com and to 7726 (SPAM), as Bank of America asks. If you responded or shared anything, call the number on your card or statement.

Related: is that Chase text real? and is that Amazon text real?, more company checks, and how to check if a link is safe before you tap it.

Sources

• Bank of America — Alert: Bank impersonation scams
• Bank of America — Understanding requests for personal information
• Bank of America — Report suspicious activity
• Bank of America — Scam prevention: trending scams and their red flags
• Bank of America — Fraud protection
• Bank of America — Online & Mobile Banking alerts
• FTC — How to avoid a government impersonation scam
• FTC — What to do if you were scammed

Shieldr isn't affiliated with Bank of America. Bank of America is a trademark of Bank of America Corporation.

← All scam guides