Skip to main content

How to spot a suspicious email or text

Read, 2 minutes

Clicking a link in a suspicious email or text can expose you or your business to financial loss and operational disruption. Fraud tactics are becoming increasingly sophisticated, and according to the FBI’s annual Internet Crime Report, cybercrime accounts for billions of dollars of losses to businesses and individuals each year.1 Use these tips to help keep your information safe.

Know the red flags

Phishing attacks, typically communications that attempt to lure individuals into providing personal information, can be difficult to distinguish from legitimate communications. However, there are common warning signs to watch for:

Email subject lines that demand urgent or immediate action

Odd or unfamiliar senders

Unexpected requests

Close text version

Take a look at this example of a suspicious email and the signs it isn't legitimate

From: MyBank

Uses incorrect company name or email address.

Subject:
Re: URGENT REQUEST

Attachment.doc

Dear Customer,

Doesn’t use your name.

We suspeck a unauthorized transaction on your account.

Has misspelled words or awkward wording.

To ensure that your account is not compromised, please click the link below and confirm your identity.

Asks you to verify or provide personal information.

Our records indicate your account was overcharged. Do not call us, to receive your refund, you must click on the link below ASAP.

Tells you not to call.

http://mybank.co.za/1233

Includes unusual URLs or ones that appear to be altered.

Article continues below

Related content

If you receive a suspicious email:

Do not click on any links, reply to the message or download any attachments.

Even if the link looks legitimate, it could be a phishing link in disguise. Always go to a company’s website by entering its correct URL directly in your browser or using their official app if one is available.

If you are a Bank of America customer, forward the email to abuse@bofa.com and then delete the email. 

If you receive a suspicious text:

Do not click on any links or reply to the message. Unexpected text messages, especially those that create a sense of urgency or request personal or financial information, may be attempts to trick you.

Even if a message appears to come from a legitimate company, it could be spoofed or include a malicious link. Instead of clicking any links, go directly to the company’s website by entering the correct URL in your browser or using the official app.

MORE FROM BANK OF AMERICA

Get the latest tips on how to protect yourself from fraud and scams by visiting our Bank of America Security Center.

Stay vigilant against phishing attacks

Email scammers change their tactics regularly. Your best defense is to always be on the lookout. You can also help protect yourself by following mobile and online security best practices, such as using strong passcodes and making sure your devices have the latest security updates.

Other social engineering attacks to know about

Smishing: Utilizes text messages and messaging apps instead of email. Avoid clicking links or responding.

Vishing: A cybercriminal impersonates a trusted source, often through phone calls or robocalls. Avoid sharing personal information, especially if you didn’t initiate the call.

  1. FBI 2025 IC3 Report, https://www.ic3.gov/AnnualReport/Reports/2025_IC3Report.pdf

Disclaimer

The material provided on this website is for informational use only and is not intended for financial or investment advice. Bank of America Corporation and/or its affiliates assume no liability for any loss or damage resulting from one’s reliance on the material provided. Please also note that such material is not updated regularly and that some of the information may not therefore be current. Consult with your own financial professional when making decisions regarding your financial or investment management. ©2026 Bank of America Corporation.

What to read next

Related content

Contact Us

We're here to help. Reach out by visiting our Contact page or schedule an appointment today.

 

 

Mobile Banking requires that you download the Mobile Banking app and may not be available for select mobile devices. Message and data rates may apply.