--- title: "Bank of America Text From 322-632 or 20504? How to Tell if It's a Scam" description: "Got a text from 322632 (322-632), 20504 or another number claiming to be Bank of America? Real BofA fraud alerts come from 39-411 or 322-78 with no links. Check yours in 30 seconds." url: "https://www.saferetirewatch.com/blog/bank-of-america-text-scam" date_published: "2026-10-11" date_modified: "2026-10-11" language: "en-US" author: "Safe Retire Watch" keywords: "bofa payment service text, bank of america text scam, bank of america scam text, fake bank of america text, bank of america fraud alert text, bofa text scam, is this bank of america text real, bank of america phishing text, bofa alert text real or fake" publisher: "Safe Retire Watch" license: "Free to quote with attribution and a link to the source URL." --- # Bank of America Text From 322-632 or 20504? How to Tell if It's a Scam Got a text from 322632 (322-632), 20504 or another number claiming to be Bank of America? Real BofA fraud alerts come from 39-411 or 322-78 with no links. Check yours in 30 seconds. "BofA Alert: A $749.00 Zelle transfer to Michael R. is pending. If you did not authorize this, reply STOP or visit bofa-secure-verify.com." If a text like that just hit your phone, take a breath — it's almost certainly a scam. Fake Bank of America text messages are the single most-reported phishing attack in the United States right now, and they are engineered to make you panic and tap the link in under 10 seconds. This guide shows you exactly what a real Bank of America text looks like, the seven red flags in every fake one, and the five steps to take right now if you already clicked. > **Short answer: is a "BofA Payment Service" text real?** > > No. Bank of America does not use the sender name "BofA Payment Service," "BofA Payment Center," or "Bank of America Alert Team." Genuine fraud texts come only from short codes 39-411 (debit/checking) or 322-78 (credit card), contain no links, and ask only for a YES or NO reply. Anything else is phishing — do not tap, do not reply, forward it to 7726 and delete it. ## Texts from 322632 or 20504: what to do Many readers search for texts from the short codes 322632 (also written 322-632) and 20504 that say they are from Bank of America. Bank of America publicly lists only 39-411 and 322-78 for fraud alerts, so treat a message from 322632 or 20504 with caution: do not tap any link or call a number in the text. Instead, open the Bank of America app or call the number on the back of your card to check whether the alert is real, then forward any suspicious text to 7726. ## 8 real scam text scripts circulating in 2026 (word-for-word) These are the exact wordings members have forwarded to us this year. Scammers rotate the dollar amounts, names, and domains, but the structure barely changes — if a message you received matches one of these patterns, treat it as a scam. - "BofA Payment Service: A payment of $1,284.00 to CASH APP is being processed. Not you? Stop it here: bofa-paymentcenter.com" — the "Payment Service" sender name is the single biggest tell; BofA never uses it. - "Bank of America: Zelle transfer of $749.00 to Michael R. pending approval. Reply 1 to approve, 2 to decline." — a reply of any kind puts you into a live chat with the scammer. - "BofA Alert: Your account has been temporarily restricted due to unusual sign-in from Houston, TX. Restore access: bofa-secure-verify.com" — location-specific fear language, lookalike domain. - "Bank of America Fraud Prevention: Did you attempt a $2,000 wire at 3:14 AM? Reply NO and our agent will call you." — the promised "agent" callback is the scam; real BofA does not schedule callbacks by text. - "BofA: Debit card ending 4471 locked. Call 1-888-###-#### to reactivate." — the number goes to a fake call center with hold music. - "Bank of America: Your Zelle profile has been suspended for security reasons. Verify your identity: bankofamerica-support.help" — Zelle profiles are never suspended by text. - "BofA Security: New device (iPhone 16) added to your online banking. Not you? bofa-alerts.net/remove" — device-added alerts appear inside the app, not as a link text. - "Bank of America: Your $500.00 deposit could not be posted. Update your account details: bofa-deposit-fix.com" — the fake "deposit problem" hook targets people expecting Social Security or pension payments. > **The domain test that never fails** > > Read the link right-to-left up to the first single slash. The real bank is always bankofamerica.com. If anything sits between that name and the ".com" — bofa-secure.com, bankofamerica-support.help, bofa.com-login.info — it is a different website pretending to be your bank. ## What a real Bank of America fraud text actually looks like Bank of America does send real fraud alerts by text. But real BofA texts follow a very tight, boring pattern. Once you know it, the fakes stand out immediately. - They come from the short code 39-411 (or 322-78 for credit card alerts). Never a 10-digit phone number. - They ask you to reply YES or NO to confirm a charge — they never ask you to click a link to "verify" your identity. - They never ask for your password, PIN, one-time code, full card number, or Social Security number. - They never threaten to close your account, freeze your card, or arrest you if you don't respond in X minutes. - They reference the last 4 digits of your actual card — not a random dollar amount out of nowhere. > **The one-line rule** > > If a text asks you to CLICK anything, CALL a number in the message, or TYPE any personal info — it is not from Bank of America. Real BofA fraud alerts are yes/no replies only. ## 7 red flags in every Bank of America text scam 1. Sender is a regular 10-digit phone number, an email address, or an international country code — not the short code 39-411. 2. The link uses a lookalike domain: bofa-secure.com, bankofamerica-alerts.net, boa-verify.co, bofa.com-login.info. Real Bank of America only uses bankofamerica.com. 3. It creates urgency: "within 2 hours," "immediately," "final notice," "your account will be locked." 4. It references a Zelle transfer, wire, or large purchase you didn't make — designed to make you tap without thinking. 5. It asks you to reply with a 6-digit code you just received. That code is your real BofA login code, and you're about to hand it to the scammer. 6. The message has small grammar errors, missing spaces, odd capitalization, or extra symbols ("Ale.rt," "B0FA"). 7. A follow-up phone call comes minutes later from someone claiming to be "Bank of America fraud department" asking you to "move your money to a safe account." Real banks never ask you to move money. ## The 3 most common Bank of America text scams in 2026 ### 1. The fake Zelle transfer alert This is the number-one variant. You get a text saying a Zelle payment of $500–$2,000 is pending to a name you don't recognize. Reply STOP or click the link — either action opens a chat with a scammer posing as fraud protection. They then ask you to "send the money back to yourself via Zelle to reverse it." Every dollar you send goes straight to them and is almost never recoverable. ### 2. The frozen-account phishing link "Your Bank of America account has been suspended due to unusual activity. Verify now: bofa-secure-verify.com." The site is a pixel-perfect copy of the real login page. The moment you type your username and password, it captures them and shows a fake "verification" screen that also asks for your one-time code — giving the scammer everything they need to drain your account. ### 3. The debit card lock-out "BofA: Your debit card ending in 4471 has been temporarily locked. Call 1-888-###-#### to reactivate." The number goes to a call center of scammers with realistic hold music. They'll ask for your full card number, expiration, CVV, and PIN "for verification." Bank of America will never ask for your full card number over the phone. ## How to tell a real Bank of America text from a fake in 10 seconds 1. Look at the sender. Not 39-411 or 322-78? It's fake. 2. Look for a link. If there's one, it's fake — real fraud alerts are yes/no reply only. 3. Look at the last 4 digits. Real alerts reference YOUR real card number. Random dollar amounts with no card reference = fake. 4. Don't tap. Open the Bank of America mobile app or type bankofamerica.com into your browser manually. If there's a real issue, you'll see it there. 5. If still unsure, call the number on the back of your debit or credit card — never a number from the text. ## What to do if you already clicked the link or replied Don't panic — but move fast. The next 30 minutes matter more than the next 30 days. Here's the exact order of operations: 1. Call Bank of America immediately at 1-800-432-1000 (personal) or the number on the back of your card. Tell them you responded to a phishing text and ask them to lock online access, freeze cards, and flag the account for fraud monitoring. 2. Change your Bank of America online banking password from a different device — not the phone that received the text (assume it may be compromised). 3. Turn on two-factor authentication using the BofA app's built-in authenticator, not SMS. SMS 2FA is exactly what the scammer just tried to steal. 4. Report the text to 7726 (SPAM) by forwarding the message. This feeds carrier-level phishing filters. 5. File a report at reportfraud.ftc.gov and, if money was lost, at ic3.gov (the FBI's Internet Crime Complaint Center). > **If you sent money via Zelle** > > By law, Zelle transfers you authorized (even if tricked) are not required to be refunded — but as of mid-2024, Bank of America, Chase, and Wells Fargo voluntarily reimburse verified imposter scams. Report within 60 days, be polite but firm, and escalate to the CFPB at consumerfinance.gov/complaint if the bank refuses. ## How to stop Bank of America scam texts from coming in - Forward every scam text to 7726 (spells SPAM). It's free and works on Verizon, AT&T, T-Mobile, and every major U.S. carrier. - On iPhone: Settings → Messages → turn on Filter Unknown Senders. On Android: open Messages → Settings → Spam protection → on. - Never reply STOP or NO to a suspicious text — even that response confirms your number is live and you'll get more. - Enable Bank of America's real push notifications inside the mobile app. Once you rely on app alerts, any SMS "from BofA" becomes obviously suspicious. - Consider a call-blocking app designed for seniors like RoboKiller or Nomorobo — they filter known scam short codes automatically. ## Frequently asked questions ### Is a "BofA Payment Service" text real? No. "BofA Payment Service" is not a sender Bank of America uses. Real alerts come from short code 39-411 or 322-78 and never contain a link. Forward the message to 7726, delete it, and check your balance by opening the official Bank of America app. ### Does Bank of America text you about fraud? Yes — but only from short codes 39-411 (debit/checking) and 322-78 (credit card), and only asking you to reply YES or NO to confirm a specific charge. They never send links, never ask for passwords, and never demand you call a number in the message. ### Is 39-411 really Bank of America? Yes, 39-411 is Bank of America's official fraud alert short code in the U.S. But scammers can spoof numbers that look similar, so always verify by opening the BofA app directly rather than replying to the text. ### What happens if I reply STOP to a scam text? Replying anything — including STOP — tells the scammer your phone number is active and monitored. Expect an increase in scam texts and calls within days. Don't reply. Forward to 7726 and delete instead. ### Will Bank of America refund money lost to a text scam? It depends on how the money moved. Unauthorized transactions (someone using your login without your permission) are almost always refunded under Regulation E. Zelle transfers you authorized while being tricked are covered under BofA's voluntary imposter-scam reimbursement policy — report within 60 days. ### How do scammers get my phone number? Most scam texts are sent to blocks of numbers by area code — the scammer has no idea if you actually bank with Bank of America. Because BofA has more than 68 million U.S. customers, roughly 1 in 5 texts hits an actual customer. That's why the scam works at scale. ## The bottom line Bank of America will never text you a link, never ask you to move money to "protect" it, and never call you moments later demanding your one-time code. If a text scares you, close it, open the official BofA app, and if there's really a problem, it will be waiting for you there. Every second you don't tap is a second the scammer loses. ## Frequently asked questions ### Is a "BofA Payment Service" text real or a scam? It is a scam. Bank of America does not use the sender name "BofA Payment Service," "BofA Payment Center," or "Bank of America Alert Team." Genuine Bank of America fraud alerts arrive from short codes 39-411 (debit and checking) or 322-78 (credit card), contain no links, and ask only for a YES or NO reply. Do not tap the link — forward the message to 7726 and delete it. ### What short codes does Bank of America actually text from? Only 39-411 for debit and checking alerts and 322-78 for credit card alerts. Bank of America does not send fraud alerts from a 10-digit mobile number, an email-to-text address, or a named sender, and its real alert texts never include a login link. ### What should I do if I clicked the link in a Bank of America scam text? If you only opened the page, close it and delete the text. If you entered your online banking ID or password, change it immediately from another device and turn on two-factor authentication. If you entered a card number or a one-time code, call the number on the back of your card right away, ask for the account to be locked and the card reissued, then report it at ReportFraud.ftc.gov. Reporting unauthorized transfers within two business days caps your liability at $50 under federal Regulation E. ### Will Bank of America ever ask me to confirm a Zelle payment by text link? No. Real Zelle and fraud alerts are answered with a plain YES or NO reply or inside the Bank of America app. Any text asking you to visit a website, call a number in the message, or 'reverse' a Zelle payment to yourself is a scam. ### How do I report a fake Bank of America text? Forward the message to 7726 (SPAM) — it is free on all major US carriers — then report it to Bank of America at abuse@bankofamerica.com and at ReportFraud.ftc.gov. Afterwards, block the sender and delete the message. ## Related pages - [Phishing & email scams](https://www.saferetirewatch.com/scams/phishing-scams) - [AI voice & deepfake scams](https://www.saferetirewatch.com/scams/ai-voice-scams) - [How do I know if a text message is a scam?](https://www.saferetirewatch.com/answers/is-this-text-message-a-scam) - [Does the IRS call you about unpaid taxes?](https://www.saferetirewatch.com/answers/does-the-irs-call-you) - [How do I protect my parents from scams?](https://www.saferetirewatch.com/answers/how-do-i-protect-my-parents-from-scams) - [Microsoft Scam Email in 2026: How to Spot the Fake Alert](https://www.saferetirewatch.com/blog/microsoft-scam-email) - [FedEx Scam Text in 2026: The Fake Delivery Message That's Draining Senior Bank Accounts](https://www.saferetirewatch.com/blog/fedex-scam-text) - [PayPal Scam Email in 2026: 9 Real Examples, Every Red Flag, and What to Do If You Clicked](https://www.saferetirewatch.com/blog/paypal-scam-email) - [USPS Text Scam in 2026: How to Spot the Fake Delivery Text (Real Examples)](https://www.saferetirewatch.com/blog/usps-text-scam) --- Source: https://www.saferetirewatch.com/blog/bank-of-america-text-scam — Safe Retire Watch, real-time scam alerts for retirees.