The Fraud Alert Call or Text: Use the Number on the Card, Not the Number in the Message

never call the number in a fraud alert

The fraud alert callback map

The message creates the fear ("your card was used"), provides the instruction ("call this number"), and the number connects to a fake bank rep who asks for the card number, PIN, or a code. The details read back are the payment.

1. The trapUrgency plus a callback numberThe message creates fear and provides the instruction to call; the fake representative asks the parent to verify the card number, PIN, or a texted code, or to "reverse" a charge by reading details back. Those details are the theft.
2. Path 1The banking appReal fraud alerts appear inside the app. If the parent's bank app is installed, open it and check for the alert there: a real alert can be acted on in the app; a fake one simply will not be there.
3. Path 2-3The card or the typed-in websiteThe customer service number printed on the physical card is the bank's real line; or type the bank's address into the browser and use the number on the help or contact page. Never a number from the message, never a link from the message.
4. If the parent called backCard number, code, or PIN given = real compromiseFollow the first-hour bank response: lock the card, call the real fraud line, change passwords. No details given: the call was likely harmless, but the number is confirmed-live, so more messages will come.

Send this Print this

How the trap works

The message creates the fear ("your card was used"), provides the instruction ("call this number"), and the number connects to a fake bank representative who asks the parent to verify the card number, the PIN, the code from a text, or to "reverse" the charge by reading back details. The details the parent reads back are the payment: the scammer now has the card number and the verification code. The FTC describes the same pattern under phone scams: the message creates urgency, and the call-back completes the theft.

The three safe verification paths

1. The banking app. Real fraud alerts appear inside the app. If the parent's bank app is installed, open it and check for the alert there. A real alert can be acted on in the app; a fake one simply will not be there.
2. The number on the back of the card. The customer service number printed on the physical card is the bank's real line. Call that, and ask directly whether the alert is real.
3. The bank's website, typed in. Type the bank's address into the browser, go to the help or contact page, and use the number listed there. Never use a number from the message, and never tap a link from the message, which can go to a fake login page.

Teach the parent the one-liner

"I will call the number on the back of my card."

That sentence ends the call every time, because the scammer's script does not survive a transfer to the real bank. Write it by the phone next to the gift card rule. The two one-liners together defeat most phone and text scams aimed at the parent.

If the parent already called back

If the parent called the number in the message and read out the card number, the code, or the PIN, treat it as a real compromise: follow the first-hour bank response (lock the card, call the real fraud line, change passwords). If no details were given up, the call was likely harmless, but the number is now confirmed-live, so more messages will come: see when a parent keeps getting targeted. The same logic covers the phone-call version of this scam: the callback scam guide.

Related

• The callback scam: missed calls and "call this number" voicemail traps.
• Verify any message independently: the habit that keeps the check on the right side.
• A suspicious text or call arrived: the first-hour playbook.
• Bank account compromised: when the response becomes real.

Sources

• FTC: Phone scams (retrieved August 2026)
• FTC: What to do if you were scammed (retrieved August 2026)

Found an error? Report it.