Here are some common ways a criminal posing as your financial institution may try to scam you.

• The email may have your institution’s logo and a domain name that looks legitimate initially – but might be just a letter or two off.
• The email often uses attention-getting subject lines to trick you into clicking on a link or opening an attachment so that you can provide your personal information.
• Or, the email might provide a link to an official-looking web page to log in to your online banking – so they can steal your login credentials.

In a vishing scam, a scammer will contact you by phone. Using readily available technology, criminals can show ANY name or phone number they want on YOUR caller ID, making you more likely to answer. Scammers can display your town or area code, or even the first few digits of your phone number, to make it look like your financial institution’s calling.

• The scammer might say they need your information or claim your account has been compromised and advise you to transfer your money into a new account – for “safekeeping.”

In a smishing scam, criminals will contact you by text message.

• Many financial institutions use text messages to send real-time alerts to their customers – but they will never ask you to provide personal information by text.

While it’s not the most high-tech option, scammers can try to steal your information through fraudulent requests by snail mail.

• For example, You might receive a fake check in the mail with a letter asking you to deposit the check in your account and wire money to a third party. Don’t fall for it. The check will bounce, and you’ll be responsible for the money you wired.

Watch Out for These Red Flags

If you’re contacted, be on the lookout for these red flags:

• They ask for sensitive data.
• They use threatening language.
• They use odd phrasing or misspellings – especially in names or addresses.
• They say they’re a financial institution you don’t use.
• They pressure you to stay on the line instead of calling back at the institution’s customer service number.

How You Can Protect Yourself

Now that you know what to look for, how can you protect yourself from a bank imposter scam?

• Never share sensitive information such as your Social Security Number, account number, PIN, password, or verification code. It’s only safe to provide details like these if you contact your financial institution.
• Don’t reply, download attachments, click links, or log in to a linked website, which could be a dummy site designed to capture your online account information.
• Delete suspicious emails right away.
• Don’t automatically trust caller ID or official-looking emails.
• Hover your cursor over links or buttons before clicking. If the link destination doesn’t look right – don’t click.
• If you’re ever in doubt, contact your financial institution directly to verify a request or communication. Don’t use a phone number, address, or link you’ve been given – look it up yourself.

Scammers frequently update their methods, so it’s important to stay vigilant and practice caution if you receive suspicious communication.