Warning: my bank texted me 24 times in one month and none of them were real
I counted every fake fraud alert I got in March and hit 24, which is about one a day, all pretending to be my bank in Denver asking me to click a link. The scary one came at 2 a.m. and had my real last 4 digits, so I almost tapped it while half asleep. How do you all tell the fakes from the real ones when they already know your info?
Check the number it came from first, because banks almost never text from a random 5 or 6 digit short code that changes every time. Second thing is to just call the number on the back of your card, never the one in the text, and ask if they sent you anything. The last 4 digits thing is easy for them to get, half the time it's in some old data breach, so knowing that info does not mean it's really your bank. If a text has a link in it at all, that alone is a red flag, real fraud alerts just tell you to call or log in through the app.