PanicStation.org
UK USA
us Money & financial emergencies bank scam text message • bank says suspicious transaction • confirm transaction by link • “confirm” by link message • phishing link from bank • smishing bank alert • fake fraud department message • verify account information text • suspicious transaction email • bank impersonation scam • clicked bank link mistake • gave bank login to link • one time passcode request • urgent fraud alert text • verify charge by link • account takeover warning • debit card fraud alert text • spoofed bank message • scammer says confirm charge

What to do if…
your bank says a suspicious transaction is linked to your account and asks you to “confirm” by link

Short answer

Don’t click the link or reply. Contact your bank using a trusted number (from your card, statement, or the bank’s official app/website) and ask them to secure your account and review recent activity.

Do not do these things

  • Don’t click the “confirm” link or log in through it.
  • Don’t call a phone number, open a chat, or download an app from the message.
  • Don’t share your password, PIN, or a one-time code (OTP) with anyone who contacted you first.
  • Don’t approve unexpected “new device” prompts or security notifications you didn’t initiate.
  • Don’t move money because someone claims it’s the “only way” to protect it.
  • Don’t assume it’s real because caller ID looks right or the message is in a real-looking thread—numbers and threads can be spoofed.

What to do now

  1. Stop and keep the evidence. Take a screenshot of the message (and the sender details). Don’t interact with it further.
  2. Contact your bank safely (now). Use the number on the back of your card, your statement, or the bank’s official app. Tell them: “I got a message asking me to confirm a suspicious transaction by link. I did not request this. Please check my account and secure it.”
  3. Ask the bank to take immediate protective actions. Depending on what you use, ask for: card freeze, new card number, password reset, disabling online banking until verified, account alerts, and review of pending transfers.
  4. Quickly check for account takeover signs. In your banking app (or with the agent), look for: new payees/recipients, profile changes (email/phone/address), new devices, new cards/digital wallet additions, and any transfers you don’t recognize.
  5. If you clicked the link or entered info, assume compromise.
    • Tell the bank immediately and follow their fraud steps.
    • Change your online banking password using the official app/website you navigate to yourself (not the link).
    • If you reused that password elsewhere, change those accounts too.
  6. Report the phishing attempt.
    • If it was a text, forward it to 7726 (SPAM) and report it to the FTC.
    • If it was an email, you can forward it to reportphishing@apwg.org, then report it to the FTC.
    • Report to the FTC at ReportFraud.ftc.gov.
  7. If money was sent out (especially wire/transfer), act fast. Tell your bank it was unauthorized and ask whether they can stop it or attempt to recall it (it may not be possible), and what deadlines apply. Also file a report with the FBI’s IC3 (ic3.gov) to document the incident.

What can wait

  • You don’t need to decide right now whether to close the account permanently.
  • You don’t need to argue with the sender or “play along” to gather proof.
  • You don’t need to do a full identity-theft recovery workflow unless the bank confirms details were taken or you see broader signs of misuse.

Important reassurance

These messages are designed to create urgency and push you into clicking before you think. Taking a moment to use a trusted contact method is exactly how you avoid making the situation worse.

Scope note

This is first-step guidance for the initial scramble: stop the scam path, secure access, and reduce losses. If your personal information was exposed, you may need follow-on identity-protection steps (like credit freezes) after the immediate banking lock-down.

Important note

This guide provides general information, not legal, financial, or professional advice. Bank security procedures vary; if anything feels unclear, ask your bank’s fraud department to tell you the safest next step and what to document.

Additional Resources
Support us