Why Scam Texts Can Appear in Your Bank's Real Message Thread
A scam text can land in the same conversation as genuine messages from your bank or courier. How sender ID spoofing works, why it happens, and what it means for you.
You scroll through your texts from "YourBank" and see years of genuine messages: payment confirmations, one-time codes, statements ready. At the bottom, a new one: "Unusual payment detected. Secure your account here." It sits in the same thread, so it must be real. It is not.
How sender ID spoofing works
Text messages can be sent with an alphanumeric sender name, such as a company name, instead of a phone number. Your phone groups messages by that name. Scammers can set the same sender name, so their message is filed alongside the genuine ones.
The thread proves nothing. A scam text can sit right under a real code from your bank.
What it means for you
- Your bank's systems have not necessarily been hacked; the name was faked.
- Past genuine messages in the thread do not make a new message genuine.
- Judge the request: links to "secure your account", requests for codes, or calls to a number in the text are warning signs.
hxxps://yourbank-secure-device[.]com immediately to cancel.What to do
- Do not tap links or call numbers in the text.
- Open your bank's official app, or call the number on your card.
- Report the text. See how to report scam texts.
Industry and regulators in several countries are introducing sender ID registration to make spoofing harder, but it has not disappeared. Keep verifying.
Got a text you are unsure about? Paste it into CyberWatch AI Scan for a free check.
For more, see phishing by email, SMS and phone in our complete guide.
Frequently asked questions
How can a scam text appear in my bank's thread?
Phones group texts by the sender name or number. Scammers can set the sender name to match the bank's, so their message joins the genuine thread.
Does that mean my bank was hacked?
No. It means the sender name was faked, not that the bank's systems were compromised.
So how do I know a text is genuine?
Do not rely on the sender or thread. Check through your bank's app or the number on your card, and never follow links or share codes from texts.
Sources
- How To Recognize and Report Spam Text Messages, US Federal Trade Commission
- Phishing: spot and report scam emails, texts, websites and calls, UK National Cyber Security Centre
- How To Protect Your Phone From Hackers, US Federal Trade Commission
