Fake Bank 'Secure Message' Email
An email says you have a 'secure message' from your bank and must log in to read it — the login page is fake and steals your credentials.
Think a message like this reached you? You can check it right now.
What this scam is
You receive an email styled like your bank's secure-message system, telling you an important encrypted message or document awaits and to click 'view secure message' and sign in. The sign-in page is a copy that captures your online-banking credentials. The professional look and vague urgency ('important account notice') are designed to get you to log in without scrutiny.
What it usually looks like
- A 'you have a secure message' email from your 'bank.'
- A 'view message' button leading to a login page.
- Vague but important-sounding subject lines.
- A web address that is not your bank's.
Common warning signs
- The link domain is not your bank.
- You must log in via the email to 'read' a message.
- Generic greeting and pressure to view now.
- Attachments you are urged to open.
Example wording scammers use
“You have received a new secure message regarding your account. Sign in to view: securemail-bankportal.net”
“Important: an encrypted document requires your immediate attention. Click to authenticate.”
These are illustrative examples written by ScamSplain, not real messages.
What the scammers want
- Your online-banking username and password.
- To install malware via an attachment.
- Access to move money.
What to do
- Do not click; log in through your bank's official app or typed address to check for messages.
- Verify by calling the number on your card.
- Do not open unexpected attachments.
- Report and delete.
What to do if you already responded
- Change your online-banking password and call the fraud line.
- Scan your device if you opened an attachment.
- Report at reportfraud.ftc.gov.