Anatomy of a scam: the "did you authorize this?" bank-fraud text, line by line

This is the seventh in our series taking a single scam apart line by line. Our subject is, by the FTC’s 2023 data analysis, the most-reported scam text in America: the fake bank fraud alert. That FTC analysis found that bank impersonation was the most-reported text message scam, and the messages are “designed to create a sense of urgency, often by asking people to verify a large transaction they did not make.” The whole con fits on your lock screen.

Here’s a representative example. The bank is invented; real banks send genuine fraud alerts and are themselves impersonated by these texts.

Northgate Bank Alert: Did you authorize a payment of $750.00 to ZELLE on 06/21? If you did NOT authorize this, call our Fraud Prevention line now: +1 (888) 555‑0142 — or reply NO to stop it.

Three short lines. Several hooks. Let’s mark each one.

”Northgate Bank Alert” — the borrowed badge

The sender name does all the work of looking official, and it costs nothing to fake. A text “may seem like it’s from a bank,” the FCC notes in its definition of smishing — “a mashup of SMS and phishing.” The displayed name, the logo-like formatting, even a spoofed short code can all be imitated. Often the bank named isn’t even yours; the scammer is blasting thousands of numbers and betting that some belong to Northgate customers. A name on a text is a costume, not a credential.

”Did you authorize a payment of $750.00” — the transaction you didn’t make

This is the heart of it. The message invents a specific, alarming charge you won’t recognize — because you never made it. The FTC found these texts work by “asking people to verify a large transaction they did not make.” The genius is that your honest answer is no, and “no” is exactly the response the scam is fishing for. Your alarm (“someone’s in my account!”) is manufactured, and it points you straight at the trap.

”call our Fraud Prevention line” / “reply NO” — the trap itself

Everything above exists to get you to do one of two things: call the number, or reply. Both lead to the scammer, not the bank. Call, and a calm “fraud agent” answers — and the text quietly becomes a bank “fraud department” phone scam, where you’ll be told to “move your money to a safe account,” read back a verification code, or install software. Reply, and you’ve confirmed your number is live and opened a conversation.

The FCC’s rule is blunt: “never click links, reply to text messages or call numbers you don’t recognize,” because “caller ID and emails can be faked, voices can be cloned, and images can be altered.” The number in the alert is part of the alert — which means it’s part of the scam.

How to spot it

The tells are in the box below, but the pattern beneath every variant is identical: a borrowed bank name + a scary transaction you didn’t make + a number to call or a reply to send + a ticking clock. Swap the bank for a card issuer, a payment app, or a retailer and it’s the same machine — the same one behind the unpaid-toll text and the fake delivery text.

What to do instead

You don’t need anything you don’t already have to beat this — the free move comes first (see the defense box). The habit is Go Direct: never act on the contact details in a message. If you’re worried there’s a real problem, call your bank using the number on the back of your card or open its official app. The FCC says the same — “call the bank, company, organization, or government agency directly and ask… if there really is a problem.” Don’t reply, not even “NO,” and forward spam texts to 7726.

If a call ever turns toward a verification code, that’s its own trap — see the verification-code scam. For more, see our defense moves and the 60-second quiz.