PanicStation.org
UK USA
uk Money & financial emergencies bank scam text message • bank says suspicious transaction • confirm transaction by link • “confirm” by link message • phishing link from bank • smishing bank alert • fake fraud department message • unexpected bank security alert • verify your account link • suspicious transaction sms • bank impersonation scam • clicked bank link mistake • gave bank login to link • one time passcode request • approve notification you didn’t start • call back to bank safely • account takeover warning • debit card fraud alert text • payment verification scam

What to do if…
your bank says a suspicious transaction is linked to your account and asks you to “confirm” by link

Short answer

Do not click the link or reply. Contact your bank using a trusted route (the number on your card or official app) and ask them to check your account for fraud.

Do not do these things

  • Don’t click the link “to confirm”, even if it looks like your bank and even if it’s in an existing text thread.
  • Don’t call any phone number, open any chat link, or follow “press 1/2 to speak to an agent” prompts from an unexpected message or call.
  • Don’t share a one-time passcode (OTP), PIN, full password, or card details with anyone who contacted you first.
  • Don’t approve any in-app prompt/“new device”/digital wallet request you did not start yourself.
  • Don’t move money to a “safe account” or “secure holding account” because someone told you to.
  • Don’t assume it’s genuine because the message knows your name or partial details.

What to do now

  1. Pause and isolate the message. Take a screenshot, then leave the message alone (don’t click, reply, or forward it to friends).
  2. Contact your bank safely.
    • Use the in-app “help/contact” option, or the number on the back of your card, or your statement.
    • If you were on a phone call about this: end the call. Then contact your bank using a trusted number from a different phone if you can (or call someone you trust first to make sure your line is clear).
    • If your bank supports it, you can dial 159 as a safe route to reach many UK banks. Tell them: “I received a message asking me to confirm a suspicious transaction via a link. Please check if it’s genuine and secure my account.”
  3. Ask your bank to lock things down while you’re on the line. Request whatever applies: freeze your card, block online banking access, reset credentials, cancel/reissue cards, and add extra verification notes to your account.
  4. Check for fast-moving takeover signs (2 minutes max). In your banking app (or with the bank agent), look for:
    • unknown devices logged in / a new “trusted device”
    • new payees/beneficiaries set up
    • unexpected card purchases or bank transfers
    • changes to your phone number, email, or address
      If you see any, tell the bank immediately and ask them to stop anything pending.
  5. If you already clicked or entered details, treat it as compromised.
    • Tell the bank immediately (same trusted route).
    • Change your banking password (and any other accounts that reused it) using the official app/website you navigate to yourself.
    • If you typed card details, ask the bank to cancel and replace the card.
  6. Report the phishing message.
  7. Report the scam attempt to the right reporting route (if you lost money or details were taken).
    • England, Wales, Northern Ireland: report via Report Fraud (reportfraud.police.uk) or 0300 123 2040.
    • Scotland: report to Police Scotland on 101.

What can wait

  • You don’t need to decide right now whether to close accounts or change banks.
  • You don’t need to confront the sender or “test” the link to see where it goes.
  • You don’t need to write a full timeline immediately; just keep the message/screenshot and focus on securing access first.

Important reassurance

These “confirm by link” alerts are extremely common and designed to trigger panic and urgency. Slowing down and contacting your bank through a trusted route is the right move—even if it turns out the alert was real.

Scope note

This is first-step guidance to prevent loss and secure access. If money has left your account or your identity details were taken, you may need follow-on steps (bank dispute processes, identity protections) after the immediate lock-down.

Important note

This guide provides general information, not legal, financial, or professional advice. Bank processes and app screens vary; when in doubt, use a trusted contact route and ask the bank’s fraud team to talk you through the safest next step.

Additional Resources
Support us