Chase scam texts, emails and calls: how to spot a fake

Nov 4, 2026 · 4 minute read · By IsSiteLegit

If a text, email or call says it is from Chase and pushes you to act fast, do not tap the link and do not call the number in the message. Open the official Chase app, or type chase.com into your browser yourself, and look for the same alert there. If nothing is there, the message was almost certainly fake.

What fake Chase messages usually say

Scam messages copy the look of a bank, but they follow a few familiar patterns:

• Account locked or suspended. "Your account has been restricted. Verify now."
• Unusual payment. "Did you just send a payment? Reply NO to cancel." or "A charge was made on your card."
• Refund or reward. "You are owed a refund. Confirm your details to receive it."
• Fraud department calls. A caller says your account is under attack and asks you to move money to a "safe" account or read out a code.

What they share is pressure. They want you to react before you think.

The links they use

A fake message will point to a web address that is not chase.com. The address might look close, or it might look unrelated. Made-up examples of the kind of thing to watch for:

• chase-secure-login.example
• account-verify-chase.example
• a short, odd link that hides where it really goes

The real website is chase.com. A name that merely contains "chase" is not the same thing. What matters is the part just before the ending, such as .com.

Scammers also use free hosting services, so the address may not look like a bank at all. In the phishing links listed by public security feeds on 2026-11-04, 26% were hosted on free platforms such as pages.dev and vercel.app. The same feeds listed 300 phishing links in total. None of them imitated Chase that day. That does not mean Chase scams have stopped. It only shows what those feeds held on that date, and fake messages can use links that are too new to be listed.

For more on reading addresses, see our guide on how to check a link before clicking.

How to check a message is real

You do not need to judge the message. You just need to step around it.

1. Do not use anything in the message. No links, no phone numbers, no "reply" options.
2. Open the official Chase app on your phone, or type chase.com into your browser.
3. Look for alerts or messages inside your account. Real problems normally show up there.
4. If you want to talk to someone, use the phone number printed on the back of your card or shown in your account.
5. Take your time. A real bank problem will still be there in ten minutes.

Calls need extra care

Caller ID can be faked, so a call that appears to come from your bank may not. If someone calls about fraud, hang up and call the number on your card. Never share one-time codes, passwords or your full card details with a caller. A genuine bank does not need you to read out a code that was just sent to you.

Signs a message is probably fake

• It creates urgency or threatens to close your account.
• It asks for your password, PIN, full card number or a one-time code.
• The link does not go to chase.com.
• It comes from a personal email address or an unfamiliar number.
• It has odd spelling, a vague greeting or an unexpected attachment.
• It asks you to move money to keep it "safe".

One sign alone does not prove anything, but several together are a strong warning.

What a check can and can't tell you

If you want to see what public signals say about the real site, you can view our result page for chase.com. It shows the evidence, so you can see what we looked at.

If you have a suspicious link, you can paste it into our free checker. We look at things like domain age, security blacklists, look-alike brand names and what the page contains.

There are limits. Automated checks, including ours, can miss brand-new scam sites that have not been reported yet. A clean result is not a guarantee of safety. Treat it as one piece of information, and still go to the official app or website yourself.

Reporting a fake Chase message

Reporting helps others avoid the same trap.

• Texts: forward the message to 7726 (SPAM), which works with many mobile carriers.
• Emails: do not click anything. Use your email app's "report phishing" option, then delete it.
• Official report: file a report with the FTC at reportfraud.ftc.gov.
• Your bank: Chase publishes ways to report suspicious messages on its official website. Find them by going to chase.com directly.

For general advice, see the FTC's consumer advice site.

If you already paid or clicked

Stay calm. Acting quickly helps.

1. Call your bank right away using the number on your card or in the official app. Say that you may have been scammed.
2. Change your password for Chase and anywhere else you used it. Turn on two-step verification.
3. Do not send more money or follow any further instructions from the caller or sender.
4. Watch your accounts for payments you do not recognise.
5. Report it at reportfraud.ftc.gov.

If you handed over details or money to a fake website, our guide on what to do if you paid a scam website walks through the next steps.

If you are unsure about a website, you can check it with IsSiteLegit at issitelegit.com. It is free, and you will see all of the evidence.

Written with AI from IsSiteLegit's data and published after an automatic fact check: every number in this post comes from that data. Figures from security feeds describe the links listed on the day of the post. Where we link to a website’s IsSiteLegit result, a "likely legit" rating describes what our automated checks found when they ran. It is not an endorsement of the company, its products or its offers. How we write.