Scam Library

Account Takeover and Phishing

A message asks you to log in to verify your account, linking to a site that looks like a real one but isn't. Or you receive an unexpected verification code by text and a call asking you to read it back to 'confirm your identity.'

Warning signs

What to watch for

A login page reached through a link rather than typed directly or bookmarked
A verification code you didn't request, paired with a call asking you to share it
Slight misspellings in the website address
Urgent language about account suspension if you don't log in immediately

Stay safe

How to verify

Never share a one-time verification code with anyone, even someone claiming to be from the company itself
Type the company's website address directly into your browser rather than clicking a link

Already sent money or shared a password?

Contact your bank using the number on the back of your card, or the official number on your statement — not any number from the suspicious message.

Not sure if something you received matches this pattern?

Check a Message