American Express scams
Last updated September 18, 2026
The short answer
American Express scams usually start with a fraud-alert text or call about a charge you did not make. The charge is fake, but the alarm is real, and the caller uses it to get a one-time passcode out of you. American Express will never ask you to read back a code, move money, or confirm your full card number on a call you did not place.
Amex cardholders are targeted disproportionately for the obvious reason — the cards carry high limits and the customers are used to attentive service, including proactive fraud calls. That last part is what the scam borrows. A real Amex fraud alert and a fake one look the same on a phone screen, so the defence cannot be recognising the difference; it has to be never acting on the inbound contact at all.
How American Express scams work
- 1
The fraud-alert text
A text says a charge of a few hundred dollars was attempted and asks you to reply Y or N. Replying anything confirms the number is live and triggers a call from "the fraud department", now with a plausible reason to be calling.
- 2
The passcode handoff
On the call, the "agent" says they need to verify you and will send a code. The code is actually from a real login or a password reset they just triggered. Reading it out hands them the account.
- 3
Membership Rewards points theft
An email warns that points are expiring or offers to convert them to cash. The link leads to a fake login. Once inside, points are transferred to a partner programme or spent, and unlike a fraudulent charge, points are much harder to get reinstated.
- 4
Fake "card replacement" mail and calls
A caller says a new card is being issued because of a breach and asks you to confirm your current card number, expiry and security code "so the replacement matches". Those three fields are the whole card.
Warning signs
- You are asked to read back a code that was texted or emailed to you
- An inbound caller asks for your full card number, CVV, or online password
- A text about a suspicious charge wants a reply rather than directing you to the app
- An email says your Membership Rewards points expire within days
- You are told to move money to a "safe" account to protect it
- The number on the caller ID says American Express but the request does not match the app
- A caller discourages you from hanging up and calling the number on the back of your card
Examples
The $1,200 charge that was never attempted
A cardholder gets a text about a $1,200 electronics charge and replies N. Seconds later a caller from "Amex fraud" confirms the block and says they need to verify identity with a code. The code is from a password reset. The account is taken over within the minute, the shipping address changed, and a replacement card ordered to it.
Points converted overnight
A "your Membership Rewards points expire in 72 hours" email leads to a login page. Two days later 340,000 points have been transferred out to an airline programme. The charge-back rules that cover money do not cover points, and reinstatement is discretionary.
What to do
- Hang up and call the number on the back of your card. That is the only number worth using.
- Never read a verification code aloud. Real support never needs one from you.
- Check disputed charges yourself in the Amex app rather than trusting a text.
- Turn on account alerts in the app so real activity reaches you through a channel you control.
- If points were taken, call Amex immediately — reinstatement is possible but far more likely when reported the same day.
Report it to American Express
Forward phishing email to spoof@americanexpress.com and call the number on the back of your card to report account fraud.
Getting your money back
Fraudulent charges on an Amex card are covered by zero-liability protection — dispute them in the app and you are generally not out of pocket. The harder cases are account takeover and points theft. If the account was taken over, ask Amex to reset the login, remove any added authorised users, and confirm no replacement card was shipped elsewhere. If points were transferred, report the same day: reinstatement is discretionary and gets harder as soon as the points are spent at the receiving programme.
Frequently asked questions
Does American Express text about suspicious charges?
Yes, which is exactly why the fake ones work. The safe habit is to never act on the text itself: open the Amex app or call the number on the back of your card and check the charge there. A real alert will be waiting for you in both places.
Will Amex ever ask for a code they sent me?
No. A one-time passcode exists to prove you are you to Amex. Anyone asking you to read it back is asking you to prove you are you to them, which is the whole trick. Nobody legitimate will ever ask for it.
Can I get stolen Membership Rewards points back?
Often, but not guaranteed. Amex can reverse transfers and reinstate points, especially if reported before the receiving programme has spent them. This is discretionary rather than a legal protection like charge-back rights, so speed matters more here than with a fraudulent charge.
Other companies scammers impersonate
Scams reuse their scripts across brands. If you were contacted about American Express, these are the guides worth reading next.