Scam messages arrive under the bank's own sender name. Here is what actually distinguishes them.
Why the sender name is not a guarantee
Alphanumeric sender IDs are set by the sending gateway. Operators verify them for registered companies, but verification is weaker on international routes. A fake message can therefore look identical to a real one.
Five signs of a fake
- A link to a domain that is not the bank's — a replaced letter, an extra hyphen.
- Urgency: call this number now, your account is blocked.
- A request for a code, PIN or password. Banks never ask.
- A charge you did not make, with an offer to cancel it by clicking.
- Typos and odd phrasing — a sign of mass mailing, though correct spelling proves nothing.
What to do
- Do not tap the link and do not call the number in the message.
- Open the bank app yourself and check the transactions.
- Call the number from the back of your card.
- If you already entered data — block the card and change passwords.
Subscription traps
A separate scheme asks you to send an SMS to a short number or to enter card details on a lookalike site. Short codes are explained in a separate article.
See also: checking a number for spam, who calls from 8-800.