TL;DR: Scammers impersonate US banks like Chase, PNC, Citibank and Wells Fargo by text, email and phone to steal logins and one-time codes. Verify through the official app or the number on your card, and report scams to the FTC.
👉 Check my digital footprint — free 30-second check →
How bank impersonation scams work
Typically it begins with a text, email or call that appears to come from your bank's fraud team. The story is a suspicious charge, a locked card or a demand to confirm your details, and the deadline is always short. The link leads to a lookalike sign-in page, or the caller asks you to read back the code the bank just texted you.
Red flags
Real US banks stick to a few rules that scammers routinely break:
- A ticking clock: threats that the account will be frozen within minutes are meant to stop you thinking.
- A request for your code: one-time passcodes are for you alone, and a bank has no reason to ask you to repeat one.
- Odd web addresses: press and hold a link to preview it, since fake domains are often a letter or two off.
- Asks for a full PIN or password: the bank already holds what it needs.
- A familiar number on the screen: caller ID can be faked, so it proves nothing.
What to do if you get a suspicious message
Leave the message alone: no links, no callbacks to numbers it gives. Sign in through the bank's own app, type the address in yourself, or dial the number on your card. If you already tapped, typed or shared a code, reset your password from the official app, phone the bank's fraud team and go through recent activity line by line. Quick action gives the bank the best chance to halt a transfer.
Reporting contacts by bank
These details come from each bank's own security pages. Always start from the official app or website, not a message.
Chase
Chase lists 1-800-935-9935 (option 8) for personal checking, savings and debit card fraud.
PNC
PNC's reporting-fraud page lists 1-888-PNC-BANK for reporting fraud.
Wells Fargo
Wells Fargo lists 1-800-869-3557 for personal accounts and asks you to forward phishing emails to reportphish@wellsfargo.com.
Citibank
Contact Citibank through its official app or the number on the back of your card.
Reporting to US authorities
Report the scam to the FTC at ReportFraud.ftc.gov. It does not recover money, but reports help investigators spot patterns. If money has left your account, tell your bank immediately.
More guides on this topic
Banking in another country? See the Canadian bank scams guide or the UK bank scams guide. If a scammer used your details, read the US identity theft guide.
Impersonation scams often start from leaked contact details. A free digital footprint check shows whether your email or number appears in exposed data.
Frequently Asked Questions
How do I know if a message from my bank is real?
Do not trust the message itself. Open the bank's official app or type its web address yourself, or call the number on the back of your card. A real bank does not need your full password, PIN or one-time passcode.
What should I do if I gave a scammer my one-time passcode?
Log in through the official app and change your password, then call the bank's fraud line straight away and review recent transactions. Speed matters for stopping transfers.
Where can I forward a phishing email?
Wells Fargo asks for phishing emails at reportphish@wellsfargo.com. For other banks, use the reporting instructions on the bank's own security page.
Where do I report a bank impersonation scam in the US?
Report it to the FTC at ReportFraud.ftc.gov and tell your bank. Keep screenshots of the message.
Can a call that shows my bank's real number still be a scam?
Yes. Scammers can spoof caller ID, so a familiar number is not proof. Hang up and call the number printed on your card.
Sources
- Chase – Report fraud
- PNC – Reporting fraud
- Wells Fargo – Report fraud
- Chase – Bank impersonation scams
- FTC – Consumer advice