Card Activation Call or Text: How to Tell If It's a Scam

Treat any unexpected call or text about activating your card as a possible scam. You start real activation yourself, using the sticker, the number on the back of the card, or the issuer's app or website. Never give a caller your full card number, PIN, security code or one-time passcode. Hang up and call the number on your card. Caller ID can be faked, so a familiar bank name on your screen doesn't prove anything.

Is a card activation call legit?

An unexpected call about activating your card isn't something to trust, even if it looks like it comes from your bank. Chase describes scammers who pose as card issuers and claim they need to confirm information about a recently issued card. They then ask for your full card number, expiration date, security code, PIN or a one-time passcode. Wells Fargo warns that scammers can spoof phone numbers so the call shows up as the bank on caller ID.

A call is only trustworthy when you placed it yourself, to the number on your card's sticker, the back of the card or your statement.

How does the card activation scam work?

Scammers count on the fact that people get new and replacement cards all the time. Common versions include:

• The "verify your new card" call: the caller says your card needs to be activated or confirmed and asks you to read out the card details.
• The one-time code request: you receive a verification code by text, and the caller asks you to read it back. The FTC explains that a scammer can use your code to prove they're you and get into your account.
• The activation text: a message says your card is inactive or blocked and links to a fake page that asks for your card number and PIN.
• The "protect your money" call: the caller says your account is at risk and asks you to move money. The FTC says a request to move your money to protect it is a scam.

What are the red flags?

• You didn't start the contact.
• You're asked for a PIN, security code, full card number, password or verification code. The FTC says anyone who asks for your verification code is a scammer.
• You feel rushed or threatened, for example with a warning that your card will be canceled. TD says your bank would never threaten to cancel your services.
• The text contains a link. The FTC says legitimate companies won't ask for information about your account by text.
• You're asked to give remote access to your device, or to buy gift cards. TD lists both among things a bank would never ask. If gift cards come up, read what to do if someone asked you to pay with gift cards.

What does real card activation look like?

For the official steps for your bank, use our card activation guides, such as the Chase guide. If the sticker is gone, see how to activate a card without the sticker.

What should I do if I get an activation call or text?

1. Don't reply, click any link or call any number in the message.
2. If you're on a call, hang up. Chase says to end the call right away rather than trying to end it politely.
3. Call your bank using the number on the back of your card or on your statement, or open the official app. TD suggests using a different phone line if you can.
4. Ask whether there's really a problem with your card.
5. Report the text by forwarding it to 7726 (SPAM) or using your phone's report junk option.
6. Report the scam to the FTC at ReportFraud.ftc.gov in the US, or to the Canadian Anti-Fraud Centre in Canada.

What if I already gave them my card details or a code?

Call your card issuer right away, using the number on the back of the card. The sooner the bank knows, the sooner it can block the card and review recent activity.

1. Tell the bank exactly what you shared: card number, security code, PIN, verification code or online banking login.
2. Ask the bank to lock or replace the card.
3. Change your online banking password if you shared login details or a code.
4. Review recent transactions and report any you don't recognize.
5. Report the scam to the FTC or the Canadian Anti-Fraud Centre.

Wells Fargo, for example, lists 1-800-869-3557 on its scam page for customers who have already shared information. For other banks, use the number on your card. If your new card still isn't working afterward, see what to do when a new card isn't in your app or has no PIN.

Is it different in Canada?

The scam works the same way in Canada. Forwarding a scam text to 7726 works in Canada too, and the Government of Canada's Get Cyber Safe site says it's free and doesn't count toward your data or messaging plan. Report scams to the Canadian Anti-Fraud Centre online at reportcyberandfraud.canada.ca or by phone at 1-888-495-8501 (Monday to Friday, 10 am to 4:45 pm Eastern). TD Canada Trust's advice is to take down the caller's name, hang up, and call the bank using the number on the back of your card.