🐟 Phishy
HomeCommon scam messages

"Did you attempt this transaction?" — usually a bank scam

A text that looks like it's from your bank about a "suspicious transaction" or "account locked", with a link or a number to call, is one of the most dangerous scams — it aims straight at your account. Often a "fraud department" agent calls next to "help". Remember one rule: your bank never asks for your password or a one-time code by link or over the phone.

Suspect a message like this? Check it free.
🔍 Check a suspicious message

The exact wording

Common variants: "BANK ALERT: Did you attempt a $940 transaction? Reply NO or verify here: [link]" "Your account has been locked for security. Verify your identity: [link]" Then a call may follow: a calm "fraud agent" who "helps" you "reverse" the charge — which is really a transfer you approve to their account.

The real-time code trap

While you're on the fake page (or phone), the scammer logs into the real bank site with your details. The bank sends you a genuine code — and the fake page or "agent" asks you to enter or read it out. That code is the last key to your account. A code from the bank is only ever entered on the app or site you opened yourself, and never read aloud.

6 signs it's a scam

• Asks for login, password, or a one-time code via link or phone • The domain isn't your bank's official site (check letter by letter) • Urgent threat: "account will be locked", "within 24 hours" • Generic greeting ("dear customer") with no last digits of your account • The "agent" asks you to move money to a "safe account" • Caller ID showing the bank's number proves nothing (numbers are spoofed)

What to do now

1. Don't tap the link or call the number in the text. 2. Open your bank app yourself — a real problem will show there. 3. Paste the text into the free Phishy check on this page. 4. If an "agent" calls, hang up and call the bank using the number on the back of your card.

Want Phishy to check every message automatically — for your parents and kids too?
Download Phishy free

FAQ

Does the bank ask for a one-time code to cancel a charge?

No. A one-time code is the key to your account. You only ever enter it yourself in the app or site — never read it to anyone.

The caller ID showed my bank's number — isn't it real?

No. Numbers are easily spoofed. What matters is the content of the call, not the number on screen.

What is a 'safe account'?

There's no such thing. If your money is at risk the bank simply blocks the account — it never asks you to transfer money. That request is always a scam.

Want Phishy to check every message automatically — for your parents and kids too?
Download Phishy free
More scam messages:"You have an unpaid toll" text — almost always a scam"Your package couldn't be delivered" — is it real or a scam?