Skip to content

Companies

Bank of America scams: how the fake messages work

Bank of America impersonation scams involve fraudsters posing as bank employees via fraudulent text messages, phone calls, or emails warning of fake unauthorized transactions or account lockouts. Criminals typically use SMS phishing or spoofed caller ID to trick victims into revealing online banking credentials, one-time passcodes, or authorizing fraudulent wire and Zelle transfers.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by Bank of America. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the Bank of America message real?

How the brand actually contacts customers: Bank of America sends automated push notifications, email alerts (e.g., account activity, change of address), and text alerts when enrolled in alerts. Genuine representatives will never ask you to transfer money between accounts, request your full online ID, password, passcode, PIN, full Social Security number, or MFA codes, nor will they ask you to download remote access software or coach you to lie to bank employees.

FTC/IC3 Figures: According to Federal Trade Commission data released in June 2026, consumers reported losing a staggering $3.5 billion to imposter scams in 2025, with business and bank impersonators accounting for the highest reported financial losses. Source: New FTC Data Analysis Shows Bank Impersonation is Most Reported Text Message Scam.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Fake Zelle Fraud Warning AlertSMSTrick victim into replying, triggering an automated or live scam call to steal login credentials or authorize fraudulent fund transfers.
Account Lock / Unauthorized Access PhishingEmail / SMSCapture online banking credentials, username, password, and multi-factor authentication (MFA) codes.
Imposter Fraud Department Phone CallPhoneConvince victim to transfer funds via wire, Zelle, or cryptocurrency to accounts controlled by the scammer under the guise of asset protection.
Fake Technical Support Pop-UpPop-upInduce panic, charge exorbitant fees for fake tech support, or install remote access software to harvest financial data.
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The genuine Bank of America fraud text will never include a direct clickable link directing you to an external login portal.
  • Genuine Bank of America representatives will never ask you to read back a one-time passcode (OTP) or mobile banking authentication code sent to your phone.
  • Authentic alerts from Bank of America reference standard digital banking alert channels and prompt you to log into the official mobile app or bankofamerica.com, rather than requesting a reply via text with financial credentials.
  • Real Bank of America staff will never instruct you to move funds to a "safe account," purchase cryptocurrency, or use Zelle to protect your money from fraud.
  • Fake emails or texts often originate from generic domains or spoofed sender addresses rather than official Bank of America domains (bankofamerica.com or bofa.com).
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • If you contacted them but gave nothing: Immediately close any phishing browser tabs, block the caller's phone number, and forward suspicious messages to abuse@bofa.com.
  • If you gave information (credentials / SSN): Immediately log into Bank of America online banking (if accessible) to change your password, update your PIN, and enable extra authentication methods like push notifications and biometrics. Call Bank of America customer service at 800-432-1000 to secure your profile.
  • If you paid / transferred funds: Immediately call Bank of America's fraud department at 800-432-1000 (consumer debit/Zelle) or 800-732-9194 (credit card) to report unauthorized transactions and request a recall or freeze. File a report with the FBI IC3 at www.ic3.gov and the FTC at reportfraud.ftc.gov.
  • If you gave remote access to your computer: Immediately disconnect your device from the internet, run a comprehensive antivirus/malware scan, change all online banking passwords from a separate clean device, and notify Bank of America fraud operations immediately.
05

Where do you report it?

Official reporting channel: Forward suspicious emails or texts to abuse@bofa.com. Report suspicious calls/texts or fraud by calling the number on the back of your card or bank statement, or visiting the Report Suspicious Activity page.

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources