Bank of America Security Alert Email — Is It a Scam?
You received an email from what appears to be Bank of America warning about suspicious transactions or asking you to verify your identity. Bank of America will never email you a link to enter your banking credentials. This is how the scam works.
Think this email is a scam?
Forward it to us and get a free risk assessment in under 60 seconds.
How This Scam Works
Critical Risk — Banking Credential Theft
Bank of America will never send you an email with a link to enter your online banking credentials. Any email asking you to verify your identity through a link is fraudulent.
This scam email impersonates Bank of America and warns about suspicious transactions on your account. It may reference a specific dollar amount or transaction to make the alert feel real. The email includes a "Secure Your Account" or "Verify Identity" button that leads to a fake Bank of America login page.
Once you enter your username and password on the fake page, scammers have direct access to your bank account. More sophisticated versions also ask for your Social Security number, debit card PIN, or security questions — giving criminals everything they need for identity theft and financial fraud.
The FBI's IC3 reported that phishing and spoofing were the most common crime types by victim count in 2023, with financial institution impersonation among the most damaging. Victims over 60 lost more than $3.4 billion to all forms of internet fraud that year.
Red Flags
- Email claims suspicious or unauthorized transactions on your account
- Sender address is not from @bankofamerica.com or @ealerts.bankofamerica.com
- Contains a link that does not point to bankofamerica.com
- Asks for your online banking password, SSN, or debit card PIN
- Threatens account suspension or closure if you don't act immediately
Bank of America sends legitimate alerts through their Alerts system, but these never include links to enter your credentials. Real alerts direct you to sign in through the app or website on your own.
What You Should Do
What To Do
- Do not click any links in the email
- Open the Bank of America app or go directly to bankofamerica.com
- Log in and review your recent transactions
- Call the number on the back of your debit card if you're concerned
- Report the email to Bank of America through their official security center at bankofamerica.com
How to Verify Legitimately
Open the Bank of America mobile app or go to bankofamerica.com directly. Sign in and check your recent activity and alerts. If there were genuine suspicious transactions, your bank would also try to reach you through the verified phone number on your account. Call the number on the back of your Bank of America debit or credit card to speak with a representative.
Sources
- FBI Internet Crime Complaint Center (IC3) — 2023 Internet Crime Report (elder fraud and phishing statistics)
- Bank of America — Privacy and Security Center: email fraud