Bank of America scams
Last updated September 18, 2026
The short answer
Bank of America scams typically start with a fake fraud alert text or email, followed by a call from someone impersonating BofA's fraud department. Scammers ask for your login credentials, one-time passcodes, or trick you into sending Zelle payments. Bank of America will never call and ask for your password, full account number, or one-time access code.
Bank of America is one of the most frequently impersonated banks in the U.S. Scammers use sophisticated spoofing technology to make calls and texts appear to come from BofA's real phone numbers. The most dangerous scams combine fake fraud alerts with live phone calls that sound completely legitimate.
How Bank of America scams work
- 1
Spoofed fraud alert text
You receive a text that looks like it's from Bank of America asking if you authorized a specific transaction. The text includes a phone number to call or asks you to reply.
- 2
Convincing phone call follows
A scammer calls from what appears to be Bank of America's number. They reference the text and claim to be from the fraud department. They already know your name and may know the last four digits of your card.
- 3
One-time passcode interception
The scammer says they need to verify your identity and will send a code. They trigger a real Bank of America verification code, then ask you to read it back. This gives them access to your account.
- 4
Money moved out of account
Once inside your account, the scammer initiates wire transfers, Zelle payments, or changes your contact information to lock you out.
Warning signs
- A text about a suspicious transaction asks you to call a number or reply with information
- A caller from "Bank of America" asks for your one-time verification code
- Someone claiming to be BofA asks you to send money via Zelle to "protect" your account
- An email says your Bank of America account is locked and asks you to click a link
- The caller pressures you to act immediately and stay on the phone
- You're asked to download an app or give remote access to your device
Examples
Fake fraud alert leading to account takeover
You get a text: "BofA Security: Did you attempt a $2,500 wire transfer? Reply Y or N." You reply N. A caller from Bank of America's real-looking number asks you to "verify" by reading back a code texted to your phone. That code lets the scammer log into your account and change your password.
Phishing email about Erica security alert
An email branded with Bank of America's logo says Erica (BofA's virtual assistant) detected suspicious sign-in activity. You're asked to click a button to "Verify Your Identity." The link goes to a fake login page that captures your online banking credentials and security questions.
What to do
- Call Bank of America directly at 1-800-432-1000 using the number on your debit card. Never call a number from a text or email.
- Never read back one-time verification codes to anyone who contacts you.
- If you shared your login information, change your password immediately from a trusted device.
- Contact BofA's fraud department and request a freeze on your accounts if money was moved.
- File a complaint with the CFPB at consumerfinance.gov if the bank denies your fraud claim.
Report it to Bank of America
Forward phishing to abuse@bofa.com and call the number on the back of your card.
Getting your money back
Report unauthorized transactions to Bank of America's fraud department at 1-800-432-1000 as soon as possible. Under federal Regulation E, you have stronger protections the sooner you report. If the bank doesn't resolve your claim, file a complaint with the CFPB. Keep records of all communications with the bank about the fraud.
Frequently asked questions
Does Bank of America text customers about fraud?
Yes, Bank of America sends legitimate fraud alerts via text. However, real BofA alerts will never ask you to provide your password, full account number, or one-time verification codes by text or phone. If you receive a suspicious alert, call the number on the back of your card.
What should I do if someone called from Bank of America's real phone number?
Scammers can spoof caller ID to display any number, including Bank of America's real ones. Never trust caller ID alone. Hang up and call BofA at 1-800-432-1000 using the number on your card or statement.
Can Bank of America reimburse me for a scam?
For unauthorized transactions (where someone accessed your account without permission), Bank of America must investigate and likely reimburse under Regulation E. For transactions you authorized under false pretenses (like Zelle payments), reimbursement varies. File a claim and escalate to the CFPB if denied.
Other companies scammers impersonate
Scams reuse their scripts across brands. If you were contacted about Bank of America, these are the guides worth reading next.