Fake Bank Text Impersonation: How It Works
Launch library · evergreen read
A text message appears within the same message thread as genuine, previous messages from your bank, warning of suspicious account activity and providing a helpful link to "secure" your account right away. This is possible because text messages can be technically spoofed to slot neatly into an existing conversation, making the fake message look genuinely indistinguishable from earlier real ones sitting right above it.
The linked page mimics the bank's real login screen very closely, sometimes right down to small visual details, and quietly captures whatever username, password or one-time code you enter, passing it straight to the scammer in real time so they can log into your actual account almost immediately afterward.
Banks do not send links asking you to log in and then confirm your personal details after sending a security alert like this. If an unexpected text raises a concern about your account, close it entirely and open your banking app directly instead, or simply call the number printed on the back of your physical card.
Treating every unexpected link as genuinely unsafe until properly verified, even one that appears sitting inside a trusted, familiar message thread, is a habit well worth keeping regardless of how convincing the surrounding, older messages happen to look at first glance, however familiar the thread feels.