Skip to content

Analyze · text message

Check a suspicious message

See how TrustGuard reads a real scam

Sign in to check your own message. Here’s a worked example:

Sign up to check your own messageSign in

Case TG-02: SMS, Bank Fraud Alert / Smishing

Case TG-02/SMS/Bank Fraud Alert / SmishingHigh risk · 94

The message

Unknown senderUNVERIFIED

Wells Fargo Fraud Dept: we detected a suspicious charge and your account has been suspended. Verify your identity immediately at http://flagged, indicator 1: wf-secure-verify.co or your funds will be frozen. Confirm your flagged, indicator 2: full card number, PIN, and Social Security number. To lift the hold you must flagged, indicator 3: buy a prepaid card.

The read

High-Confidence Scam

Do not reply or pay. This is very likely a scam.

Real banks never ask for your full card number, PIN, and SSN via a text link, and they never require prepaid cards to "lift a hold". The look-alike URL is a giveaway.

Investigation timeline

  1. Input

    Text message

  2. Indicators

    3 detected

    Look-alike domain, Credential harvesting, +1 more

  3. Fraud type

    Bank Fraud Alert / Smishing

  4. Risk score

    94 / 100 — High

  5. Next step

    Do not click the link — contact your bank using the number on the back of your card.

  1. Indicator 1: Look-alike domain

    wf-secure-verify.co

    Impersonates Wells Fargo with a deceptive URL

  2. Indicator 2: Credential harvesting

    full card number, PIN, and Social Security number

    Requests card number, PIN and SSN — never sent via text

  3. Indicator 3: Prepaid card demand

    buy a prepaid card

    Legitimate banks never ask you to buy prepaid cards