The Fake Bank Fraud Alert: When 'Did You Make This Purchase?' Is the Scam
Scam texts impersonate bank fraud alerts, then a fake fraud agent calls to 'help' and drains the account. How to tell real alerts from fakes and check the number that contacted you.
The most expensive text scam in America looks exactly like the real thing: 'FreeMsg: Did you attempt a charge of $503.49 at Walmart? Reply YES or NO.' Replying NO triggers the real attack, a phone call from a calm, professional 'fraud specialist' who confirms fake charges, then walks you through 'securing' the account by moving money or reading back codes. Everything they need, you provide, believing you are stopping a theft that never happened.
Why replying is the trap
The text itself steals nothing. It qualifies you. A reply proves the number is live and that you believe you bank where the text claimed. The follow-up caller then spoofs the bank's real phone number, references the 'charge' from the text, and inherits your trust. Real bank fraud teams freeze first and never need your online banking password, a card PIN, or a one-time code to do their job.
Real alert or fake: the differences
Real alerts name the exact card
Usually the last four digits. Fakes name the bank at most, or no bank at all.
Real alerts never link to login pages
Any 'verify your account' link in a fraud text is phishing.
Real follow-up never asks for codes
A caller requesting a one-time passcode is stealing your account in real time, full stop.
Check the texting number
Banks text from consistent shortcodes. A 10-digit mobile or foreign number claiming to be your bank can be checked in a minute.
If you engaged
If you shared a code or password, call the real bank now and say so plainly; speed matters more than embarrassment, and reused passwords need changing everywhere. If money moved by wire or Zelle, ask the bank about recall in the first hours and file with IC3 the same day. Recovery odds drop steeply with every day, so act on the timeline of hours, not weeks.
Run a private check on any phone number
Get a 60 second report with possible owner, line type, location signals, and risk indicators. The phone owner is not notified.
Run a checkFrequently asked questions
My bank does send fraud texts. How do I use them safely?
Treat every alert as a notification only, never a channel. Whatever a text says, act on it by calling the number on your card or opening the app you installed yourself. That habit costs 30 seconds and defeats the entire scam category.
The caller knew my name and the last charge I made. How?
Names and merchant patterns leak through data breaches and phishing pages. Knowing details proves data access, not bank employment. Real bank staff do not need to prove themselves; they can wait for you to call back.
Can I check the number that texted or called me?
Yes. A reverse lookup shows the line type and any spam reports. Note that scammers spoof real bank numbers on calls, so a clean caller ID is not proof; the callback habit is your real protection.
Related articles
Got a Verification Code You Didn't Request? Someone's Trying to Log In
An unrequested one-time code usually means someone is trying to log into your account, and the follow-up call asking you to read the code is the actual theft. What to do in the next ten minutes.
Is This Phone Number a Scam? How to Tell in 60 Seconds
The exact signals that flag a phone number as a scam: line type, fraud score, country mismatch, and known scam reports. With a 60 second check that catches most setups.
Phone Scams in 2026: The 15 Most Common Scams
A complete guide to the most common phone scams in 2026. IRS impersonation, package delivery, OTP theft, AI voice clone scams, and how to verify the caller in under 60 seconds.
Unknown Number Calling? How to Find Out Who It Is (2026)
Got a call or text from an unknown number? Learn how to identify it, how to read no caller ID and foreign numbers, and how to check if it is a scam in 60 seconds.
Check the number. Know more.
Run a private 60 second report. The phone owner will not be notified.
Start your check