TL;DR: Fake Bank of America texts claim your account is locked, a Zelle payment is pending or a large purchase needs approval, then push you to tap a link or call a number. Don’t. Forward the text to 7726, forward any BofA-branded scam email to abuse@bofa.com, and if you responded, call the number on the back of your card. Bank of America’s real alerts never need your password, PIN or a one-time code.
What the fake texts say
The wording changes constantly, but the themes repeat:
- "Unusual activity" on your account, or a large Zelle payment waiting for your approval;
- your account is locked until you "verify" through a link;
- a new device has signed in, with a number to call "if this wasn’t you.
The goal is either a fake login page or a phone call with a fake “fraud specialist.” The second is more dangerous, because the person on the phone can talk you into moving money to a “safe account” or reading out a code.
How to report them
According to Bank of America’s report suspicious activity page:
- Texts: forward to your mobile carrier at 7726 (SPAM);
- Emails or texts using Bank of America’s name: forward to abuse@bofa.com;
- If you responded to a suspicious call, text or email: call the number on your card or statement, not any number in the message;
- Suspected fraud on ATM, debit, check or Zelle: log in to Online Banking or call 800-432-1000.
- Consumer credit card fraud: 800-732-9194.
- Security issues with a Bank of America product: email security@bofa.com.
The “reply YES or NO” trick
Banks do send genuine fraud alerts, and scammers copy the format. If you reply NO (“that wasn’t me!”), the scammer calls back pretending to be the fraud team, already knowing you’re worried. The safest move with any alert: open the Bank of America app yourself or call the number on your card. If the alert was real, you’ll see it there.
Never give these to anyone who contacted you
- your Online Banking password or PIN;
- a one-time passcode sent by text;
- permission to “reverse” a Zelle payment by sending one;
- access to your phone or computer.
Zelle payments are hard to claw back once sent; see whether you can get Zelle money back.
If you clicked or shared details
- Call Bank of America on the number on your card.
- Change your Online Banking password and turn on two-factor authentication.
- Check recent transactions and Zelle recipients.
- Report to the FTC.
- If you shared your SSN or ID, consider a credit freeze.
Why did they text you?
Scammers send bank texts to huge lists. Many recipients don’t even bank with BofA; it’s a numbers game. The lists are built from breaches, data brokers and plain random dialling. A free email exposure check shows whether your details are circulating, and our guide to US bank impersonation scams covers the wider pattern.
Frequently Asked Questions
How do I report a fake Bank of America text?
Forward it to 7726 and forward BofA-branded scam messages to abuse@bofa.com. Then delete it.
Does Bank of America send fraud alert texts?
Banks do send alerts, so scammers copy them. Check in the app or call the number on your card instead of using the message.
I replied to the text. What now?
Don’t engage with any follow-up call. Call Bank of America on the number on your card and review your account.
Will Bank of America ask for a one-time code?
Never share a one-time code with someone who contacted you. Banks use codes to confirm actions you started yourself.