Bank phishing emails try to send you to a fake login page before you can think. Bank of America is often impersonated because many recipients are real customers.
Does this affect you?
Use this for emails, texts, or phone calls claiming to be from Bank of America about account locks, suspicious activity, verification, payments, or urgent action.
Check the message for signs of a fake
Do not click any links while checking.
- Reveal the actual sender address, not just the display name. Genuine Bank of America mail should come from a bankofamerica.com domain.
- Hover over links on a computer. A real bank link should go to bankofamerica.com, not a lookalike or unrelated domain.
- Watch for threats such as verify now or your account will be suspended in 24 hours.
- Generic greetings can be suspicious, though advanced scams may use your real name.
- Bank of America will not ask you to reply with full account number, Social Security number, password, or a one-time verification code.
- Poor formatting, stretched logos, and mismatched fonts are extra warning signs.
Verify through the real bank
Use your own route, not the message.
- Close the suspicious email or text.
- Type bankofamerica.com into a new browser tab or open the official Bank of America app.
- Sign in normally.
- Check secure messages, alerts, and recent activity.
- If the bank needs something, it should appear in the secure account area.
- If you want to call, use the number on the back of your card or on an official statement, not a number in the message.
More control
If you entered information
Call Bank of America using the number on your card or statement and report the phishing right away so the account can be monitored or frozen as needed.
Change passwords and monitor activity
Change the online banking password from the official site or app, update any reused password elsewhere, and review transactions daily for a few weeks.
Report the email
Forward suspicious Bank of America emails to the bank’s official phishing-report address so they can investigate and shut down fake sites.
Sources
- Bank of America – Report a phishing email or website (2025)
- FTC – How to recognize and avoid phishing scams (2025)
- FDIC – Consumer alerts on phishing (2025)