US blog
Recovery

What to do after clicking a fake bank text

If you clicked a fake bank text or shared login details, follow these steps quickly: lock your account, call your bank, change passwords, and report the scam.

Bank app and recovery checklist after a suspicious text link

First, what happened?

If you only opened the link but did not type anything, close the page. Do not go back to it. Open your bank app directly and check your account there.

If you entered a password, card number, PIN, one time code, or moved money, contact your bank now. Use the number on your card or inside the official app.

This is one of those moments where fast matters more than perfect.

Use this table

What happenedWhat to do
You only opened the linkClose the page. Do not type anything. Check your bank app directly.
You entered your passwordChange the password from the official app or website. Call the bank.
You entered card detailsAsk the bank to freeze or replace the card. Review transactions.
You shared a one time codeCall the bank immediately. Treat the account as compromised.
You transferred moneyCall the bank's fraud department now. Ask about reversal or recovery options.
You reused that password elsewhereChange it everywhere you reused it.
You downloaded a fileDisconnect from the internet and scan the device before opening accounts again.

Do this in order

  1. Call the bank using the number on your card.
  2. Tell them you may have entered information on a fake page.
  3. Freeze the card or account if needed.
  4. Change your online banking password from the real app or site.
  5. Turn on app based alerts.
  6. Check recent transactions.
  7. Save screenshots of the text and fake site.
  8. Report the scam locally.

If you shared a one time code

Treat it as urgent. A one time code can be the thing that lets someone log in, add a device, reset a password, or approve a transfer.

Do not argue with the scammer. Do not keep texting. Call the bank from the official number and say: "I gave a one time code to a fake bank message."

That sentence is enough.

If money moved

Ask the bank what recovery process applies in your country and payment method. Do this even if you feel embarrassed.

For card fraud, the process is different from a bank transfer. For Pix in Brazil, ask about the Mecanismo Especial de Devolução. For wire transfers, call as soon as possible because recovery windows can close quickly.

Reporting by region

RegionWhere to start
United StatesFTC at ReportFraud.ftc.gov, your bank, and your carrier via 7726 where supported
CanadaCanadian Anti-Fraud Centre, your bank, and 7726 where supported
MexicoYour bank first, then CONDUSEF guidance and local cyber police channels
BrazilYour bank first. For Pix, ask about the Mecanismo Especial de Devolução
UAEYour bank first, then Dubai Police, Abu Dhabi Police Aman service, or the relevant official cybercrime channel

If a parent or child was the one who clicked, the next problem is usually shame, not technology. Read how to protect parents from scams or how to protect kids from scams without making them hide the next message.

Sources