A few months ago, I encountered a digital scam that looked extremely convincing. It came in the form of a text message supposedly sent by my bank, claiming that my account had been “temporarily locked due to suspicious activity.” The message also included a URL that looked very similar to the real bank website. The goal of the scam was simple: steal my login details and access my bank account.

🎯 What Was the Purpose of This Scam?

The scammers were trying to:

• Steal my banking username and password

• Trick me into entering my two-factor authentication code

• Log in to my real bank account before I noticed

• Withdraw money or steal personal information

It was a classic phishing scam, designed to create urgency and fear so I would act without thinking.

🧩 How the Scam Worked (Step-by-Step)

Here’s how the entire scam was executed:

1. A fake “security alert” text message was sent to me.

2. The message included a link that looked almost identical to my bank’s name.

3. The fake website copied the real bank’s:

   • Logo

   • Colors

   • Login layout

   • Fonts and design

4. Once the victim enters login information, it is instantly sent to the scammers.

5. The scammers then log in to the real account using the stolen details.

6. If two-factor authentication is required, they send another fake message so the victim provides the code.

This combination of data manipulation + fear + urgency makes it extremely effective.

🔍 How I Could Have Known It Was Fake

Looking back, there were several signs that the message was not legitimate. Anyone can use these tips to spot similar scams:

Red Flags

• The URL did not match the bank’s official domain

• The message created unnecessary urgency

• Banks never ask customers to “verify accounts” through text

• The sender’s number was not my bank’s official short code

• Minor grammar or formatting errors appeared in the message

How to Protect Yourself

• Always type your bank’s website manually instead of clicking links

• Call customer service directly if unsure

• Check for HTTPS and correct domain spelling

• Enable real security alerts through the bank’s app

• Never share authentication codes through text

By understanding how this scam worked and recognizing the warning signs, others can protect themselves from falling victim to similar hoaxes. Awareness is one of the strongest defenses against digital scams today.