Account & online security

Phishing texts & fake sign-ins

An urgent message sends you to a copied sign-in page that steals your password, card details or verification code.

A woman using a smartphone beside books and printed material

Recognize the pattern

How it starts

Texts or messaging alerts containing links.

The promise

Your account will be suspended unless verified now.

What happens next

A copied login page captures credentials and codes for account misuse.

Signs to watch for

  • The domain or spelling differs
  • Unexpectedly demands an urgent login
  • The alert requests sensitive details

Start with what you can do now

If this happened to you

  1. Stop entering information and leave the page.

  2. Change exposed passwords through the real website on a trusted device.

  3. If identity information was exposed, use IdentityTheft.gov to review next steps.

More steps for your payment method

What to save

Keep the original records. Use copies to organize the details.

  • Original message
  • Full URL
  • Disclosed-information list
  • Unexpected login records
Build your record checklist

Before you send money

  • Open a known app or saved bookmark
  • Check the full domain, not the logo
  • Enable multifactor authentication

These guides explain common patterns. The facts of your situation and your payment provider’s rules determine which steps are available.

A clearer place to start

Your next step starts
with the facts.

Tell us what happened. We’ll review where an analysis may help.

Request a Case Review