Skip to content

Companies

Truist Bank scams: how the fake messages work

Truist bank impersonation scams involve fraudsters sending fraudulent text messages or emails claiming unauthorized Zelle transfers or account lockouts to panic victims into clicking malicious links or calling fake numbers. Scammers aim to steal online banking credentials or trick victims into authorizing fraudulent wire transfers. Customers should verify alerts only through the official Truist mobile app or call 844-4TRUIST directly.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by Truist Bank. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the Truist Bank message real?

Truist contacts customers via official notifications through mobile/online banking, secure messaging, or calls and texts. Truist never asks customers for passwords, PINs, full account numbers, multi-factor authentication (MFA) codes, or remote access to devices over phone, email, or SMS.

According to FTC 2025 Imposter Scam data published in June 2026, consumers reported losing a staggering $3.5 billion to imposter scams in 2025, making government- and business-impersonation scams the most reported fraud category. Source: Federal Trade Commission (FTC).

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Fake Security Alert SMS (SMiShing)SMSTo panic the victim into calling a fraudulent number or clicking a phishing link to steal login credentials or authorize fraudulent wire/Zelle transfers
Phishing Email Warning 24-Hour SuspensionEmailCredential harvesting (capturing User ID and Password) to take over online banking accounts
Vishing / Spoofed Fraud Department CallPhoneTo convince the victim to read back MFA codes or authorize "safe account" wire transfers to scammer-controlled accounts
Check Fraud / Fake Business Invoice ScamPost / Email / SocialDepositing fraudulent checks or wiring fees before the check bounces, leaving the victim liable
03

What do the fake messages actually say?

We are not quoting example wording on this page. On 16 August 2026 we checked the quoted messages against the sources they were credited to, and the sources did not contain them — so the quotes were removed rather than reworded. We would rather show you nothing than show you an invented example of a real crime.

The exact wording changes constantly anyway. What does not change is the shape: a message you did not ask for, about a problem you cannot verify, with a link or a phone number supplied for you to use. Do not use either — reach the company the way you normally would.

04

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The incoming text message originates from a standard 10-digit mobile number, whereas legitimate Truist automated alerts arrive from a short code. If you do not recognise the short code, treat the message as unverified — Truist's own guidance is to be wary of "a short code you don't know".
  • The link provided in the SMS or email contains hyphenated domains, misspellings (e.g., truist-secure, truist-support-login), or non-Truist top-level domains, whereas genuine links point strictly to truist.com.
  • The caller or sender demands immediate action under threat of legal action, immediate account closure, or asset forfeiture within 24 hours.
  • The person contacting you asks you to read aloud a One-Time Passcode (OTP), push notification confirmation number, or mobile banking PIN over the phone.
05

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Immediately log into official Truist Online Banking or the mobile app (or call 844-4TRUIST) to change your User ID, password, and security questions. If locked out, call Truist customer care immediately.
  • Contact major credit bureaus to place a free fraud alert (Equifax: 800-349-9960, Experian: 888-397-3742, TransUnion: 888-909-8872).
  • Call Truist fraud specialists immediately at 844-4TRUIST (844-487-8478) to report unauthorized transactions and request a formal fraud claim and provisional credit investigation.
  • Disconnect from the internet immediately, run a reputable malware scan, and change all financial passwords from a clean, uncompromised device.
  • File a complaint with the Federal Trade Commission at reportfraud.ftc.gov or identitytheft.gov, and notify your local police department if financial loss occurred.
06

Where do you report it?

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

07

Sources