Multi-step scams
Scammers are now combining multiple scam types by taking a phased approach to try to gain your trust and make scams even more convincing.
- Step 1: Tech support scam - The impersonator claims to be from a legitimate tech support company and claims your computer has been hacked. They'll ask you to call a number and download software allowing them remote access to your computer to resolve the "issue". Then they'll ask you to log into Online Banking and look for fraudulent charges.
- Step 2: Bank imposter - Next, you'll receive a call from an imposter claiming to be from your bank, saying fraud is happening on your account. They'll tell you to electronically move money to a "safe account", such as one with the Federal Reserve or another U.S. government agency.
- Step 3: Government imposter - Then, you'll receive a third call from another imposter claiming to be a government official who is confirming the transaction. They may even send you an email or letter to make the scam look more legitimate.
Tip: Don't download software or provide remote access to anyone you don't know. Bank of America will never call you to request that you move money to protect yourself from fraud.
Imposter
Scammers may pose as businesses or people you know — like your bank, utility company, phone provider or even a friend or relative. They'll spoof legitimate phone numbers to call or text and tell you to send funds to yourself or others using online or mobile banking. They may even tell you to ignore or bypass scam warnings and alerts. If you share information, they may access your banking information and enroll in new products or services in your name.
Tip: Stop and verify. While Bank of America may send you a text to validate unusual activity, we will never contact you to request you share a code over the phone or send us or anyone else money, including through Zelle®. Read about social engineering.
Online Sales
Whether you're thinking about purchasing event tickets, adopting an animal or just browsing the web, be cautious if you see an online promotion that sounds too good to be true - it probably is.
Tip: Slow down and use caution if pressured to act quickly - scammers want you to act without thinking about the consequences. Research the seller and products independently, check reviews for possible scam notices, and compare prices with other websites. Make sure they have a refund policy, information on privacy terms and conditions, and ways you can contact them.
Social Media
Cyber criminals are actively using social media platforms and design posts or craft messaging that lures you into sharing personal information or scam you out of money.
Tip: Be mindful about sharing personal information and what you see on social media. If something seems too good to be true, its most likely a scam. Read about social media scams.
Issues with package delivery
You receive an email or text indicating there's an issue with your package or a failed delivery attempt. You'll be asked to click a link to pay a small fee or provide personal information.
Tip: Do not open unfamiliar links for payment or personal information, this may be a phishing attempt. Read more about phishing.
Donating money to a cause
Use caution if asked to donate money in person, or to a cause, using your phone. You'll be told to log into your banking app but then told to hand over your phone for the "representative" to input the charity's information and complete the transaction for you - but the scammer is sometimes actually sending money to themselves.
Tip: Don't hand over your device to anyone to complete a transaction and never ignore bank warning messages.
Investment
Be wary if you are contacted by "investment managers" or receive an unsolicited request (via social media, pop-up, text, email or phone call) that presents a "great investment opportunity." Offers that promise guaranteed returns, or the chance to get rich quick or double your money are likely a scam.
Tip: Always validate requests for money, research investment managers/offers and use caution if asked to provide personal or financial information, especially if asked to send money through digital currency/crypto currency or instant money transfers.
Tech support
If you get an unsolicited request to remotely access your computer or mobile device, it's probably a scam - and you could lose money. Scammers often pose as employees of familiar companies and ask you to provide remote access or download an app. They may call, use pop-up screens or email to convince you that your device has a virus or that you're owed money.
Tip: No matter what reason you're given, never grant device access or download any app, without confirming their identity by calling a verified phone number (not one they provide to you). Read more about tech scams.
Compromise scams
Scammers may try to target you through a fake business, social media or email account. The cyber criminal may use a hacked or fake account that looks legitimate to trick you into sending funds.
Tip: Never trust unknown individuals. Verify everything. Give all requests for funds a second look. If an email looks strange, look up the sender and email or call them (don't use the number they provide). Invest in antivirus software that can flag suspicious emails and websites. Learn more.
Natural Disaster scams
Following a disaster, unlicensed contractors will canvas the impacted areas promising to get clean up or repairs done quickly. They may ask for payment up front and not show up to do the work, or have you sign a contract that redirects insurance payouts to them and not you.
Tip: Do your research; get multiple quotes for comparison, and make sure the contractors are licensed. Use caution if you're pressured to pay up front for the job or sign over the insurance claim. Ask for proof of ID and remember, if you're asked for financial information, it could be a scam.
