Treat it as a scam until you've checked another way. Your bank will never ask you to move your money to keep it safe.
Take out passwords, codes and card numbers first.
What it looks like
A text that can land in the same thread as your bank's real messages:
We've stopped a payment of €1,240 from your account. If it wasn't you, call us now on [number].
Then a call from someone who knows your name, sometimes from a number that looks like your bank's or the police. They say your account is under attack and walk you through your own banking app to send your money to a "safe" or "backup" account. That account is theirs.
Red flags
- A number to call inside the text.
- Hurry: the payment goes through "in minutes".
- Anyone asking you to move money to protect it.
- A caller who asks you to read out a code, or to approve something in your app.
- "We'll never ask for your details", said to win your trust.
- Small mistakes in the spelling or the wording.
If it's happening now
- Don't call the number in the text and don't reply.
- If someone is on the phone, hang up.
- Call your bank on the number on your card or in its app, from another phone if you can.
- Don't approve anything in your app that you didn't start yourself.
- Report the text and delete it.
Already moved money or shared a code?
- Call your bank now on the number on your card. Tell them the time, the amount and where it went.
- Keep everything: the text, the caller's number, the time of the call, your app's record of the payment.
- Report it to the police and give your bank a copy.
- Change your banking password and PIN, and turn on any alerts your bank offers.
Where to report it
If money has gone or you shared card details, call your bank first, on the number on your card or in its app, never a number from the message.
Which country are you in?
- Free help, every day 8:00–23:00. INCIBE: call 017, WhatsApp 900 116 117 or Telegram @INCIBE017. Official page
- Report a scam message. Forward the email, or a screenshot of the text, to incidencias@incibe-cert.es. Official page
- If you lost money. Report it online at denuncias.policia.es, then sign it at a police station within 72 hours. Call 091 if it's happening now. Official page
- If your bank says no. Complain to your bank's customer service, then to the Banco de España if it won't help. Official page
- Report a scam text. Forward it to 7726, free. Official page
- Report a scam email. Forward it to report@phishing.gov.uk. Official page
- If you lost money. Report Fraud, at reportfraud.police.uk or 0300 123 2040 (England, Wales, Northern Ireland). In Scotland, Police Scotland on 101. Official page
- Report a scam text. Forward it to 33700, free. Official page
- Free help. 17Cyber, at 17cyber.gouv.fr. Official page
- Report a fake website. Pharos, at internet-signalement.gouv.fr. Official page
- If you lost money to an online scam. Complain online through THESEE on masecurite.interieur.gouv.fr. Official page
- If your card was used online. Block the card, then report the payments through Perceval on masecurite.interieur.gouv.fr. Official page
- Report a scam text. Forward it to 7726. Official page
- Report a scam. ReportFraud.ftc.gov. Official page
Read on the official pages on 12 November 2026.
Questions people ask
Can a scam text really appear in my bank's own thread? Yes. Spain's INCIBE warned in September 2025 that these texts can appear among your bank's real messages, so where it lands proves nothing.
The caller knew my name and my bank. Isn't that proof? No. Scammers often have names and numbers from earlier leaks. Only a call you make yourself, to the number on your card, is proof.
Will my bank give my money back? Call them straight away and ask. The sooner they know, the more they can try. If they refuse, you can complain to them and then to your country's banking regulator.
Is it ever safe to move money to a "safe account"? No. No bank or police force will ever ask you to.
Can Kiwi check the text for me? Yes. Press the button, paste the text, and Kiwi tells you what looks wrong and what to do next.