Is This Bank of America Text a Scam?

Bank of America does send real fraud alerts by text, but scammers replicate them exactly. The key test: if you're asked to call a number in the text, that's a scam. Always call the number on your debit card instead.

About this scam type: Texts from Bank of America about fraud alerts or account issues

ScamRadar verdict: likely-scam · Risk score: 82/100

Red flags to watch for

What to do right now

  1. Call the number on the back of your Bank of America card
  2. Log into your account directly at bankofamerica.com
  3. Report suspicious texts to 1-800-432-1000
  4. Never provide account credentials via text or phone

Real example of a Bank of America smishing text

BofA Alert: Did you authorize a $1,247.83 Zelle transfer to JOHN MARTINEZ? Reply YES or NO. If NO, secure your account: https://bofa-secure.online/verify

The link is the giveaway. Real Bank of America fraud alerts use Reply YES/NO only — they never include a verification link in the message body.

What if you already clicked or paid?

If you tapped the link but did not enter information, close the browser and clear data. If you logged in on the fake page, change your Bank of America Online ID and passcode immediately at bankofamerica.com (not from any link in the text), enable two-factor authentication, lock your debit and credit cards through the mobile app, and call the number on the back of your card to report the breach. Watch for unauthorized Zelle transfers — these are the most common follow-on fraud. If you provided one-time codes from a separate text or call, assume your account has been accessed; the bank can flag the account and require additional verification on outgoing transfers.

How to verify it's actually legitimate

Real Bank of America fraud alerts come from short codes 39872 (BofA SafePass) and 73383. They ask Reply YES if you recognize, NO if you don't, and they NEVER include a clickable link in the message. To verify any alert, log into bankofamerica.com directly or open the official mobile app and check the Message Center under Settings — every legitimate alert is mirrored there. If a text claiming to be Bank of America does not appear in your Message Center, it's fake. Customer service is reachable only at the number on the back of your card or 1-800-432-1000.

People also ask

What short code does Bank of America use for fraud alerts?

Bank of America fraud alerts come from short codes 39872 and 73383. They ask you to reply YES or NO — never to click a link. If a text claims to be from Bank of America but uses a regular phone number or includes a link, it's a scam.

Will Bank of America ever ask for my passcode by text?

Never. Bank of America will not ask for your Online ID, passcode, full card number, debit card PIN, or one-time SafePass code by phone, text, or email. Any request for these is a scam regardless of how official the message looks.

What is the SafePass code scam?

Scammers call you, claim to be Bank of America fraud, and ask you to read back the SafePass code that just texted you. That code is the login or password reset code for your account, and reading it to the caller hands over access. Never share SafePass codes by phone.

I clicked the BofA scam link — am I hacked?

Not from clicking alone. The risk is whether you logged in on the fake page. If you did, change your Online ID and passcode from bankofamerica.com directly, enable two-factor authentication, and call the number on the back of your card.

How do I report a Bank of America scam?

Forward the suspicious text or email to abuse@bankofamerica.com. Report account fraud at the number on the back of your card or 1-800-432-1000. File an FTC report at reportfraud.ftc.gov.

Related scam guides

Last reviewed: 2026-06-24 by the ScamRadar editorial team. We update this page when scammer tactics change or when official agencies issue new guidance.

ScamRadar · Blog · Scam Database · Is It Legit? · About