Bank & Financial Scams

Wells Fargo Scam Emails: How to Spot Them

Wells Fargo impersonation often pairs a text with a phone call. Here is how the combination works and how to shut it down.

By SpamCheck Editorial Team·Updated 2026-09-03·5 min read

Quick answer

Do not use the link or the number in the message. Open the Wells Fargo app or type wellsfargo.com yourself and sign in; real alerts appear in your account. Wells Fargo will not ask for your password, PIN, card security code, or a temporary access code by email, text, or phone, and no genuine bank employee will ask you to send money to yourself or to a 'safe account'. Any message that does is fraudulent.

Warning signs to look for

  • A text asking you to approve or deny a transaction, followed by a phone call
  • A caller who already knows your name and the last digits of your account
  • A request to send a Zelle payment to your own phone number to 'reverse' fraud
  • Sender domains such as wellsfargo-alerts.com or wf-secure.net
  • A warning that your account will be closed unless you verify today
  • A link to a sign-in page you reached by tapping rather than typing

The text-then-call pattern

The most damaging Wells Fargo impersonation is not the email alone. A text arrives asking whether you authorised a payment; whichever way you answer, a call follows within minutes from someone presenting themselves as the fraud department. They confirm details they already have from breach data, build trust, and then instruct the customer to move money — commonly by sending a Zelle payment 'to yourself' — supposedly to reverse the fraudulent charge. The transfer actually goes to the criminal and clears in minutes. No bank ever asks a customer to do this.

What genuine Wells Fargo alerts look like

Real alerts are short, refer to activity you can see after signing in, and never require you to supply credentials in the message. The bank's own fraud guidance is explicit that staff will not request your password, PIN, card security code, or the temporary access codes it sends. Legitimate fraud reviews are handled by locking a card or holding a transaction — not by asking you to move funds.

Verify safely in two minutes

Close the message. Open the app you already have or type the bank's address yourself. Check alerts, recent activity, and secure messages. If you want to talk to someone, hang up on the caller and dial the number printed on the back of your card. A genuine representative will expect this and will not pressure you to stay on the line. If someone objects to you calling back, that is your answer.

What Wells Fargo asks customers to do

Wells Fargo maintains a fraud reporting page with a dedicated address for forwarding suspicious emails and asks customers not to reply to them. If you shared information or sent money, they ask you to call immediately using the number on your card or statement. Forwarding scam texts to 7726 also reports them to your mobile carrier.

If you already responded

Call the bank on a trusted number now. Change your online banking password from a device you trust and anywhere it was reused. If a payment went out, say so explicitly and ask about a recall — timing is decisive. Report at reportfraud.ftc.gov and file with the FBI at ic3.gov the same day. Keep a written log of every call, time, and reference number.

Check the message before you trust it

If you are on the fence, forward the original email to check@spamcheck.com. SpamCheck explains what the sender details and links really show and what to do next, in plain language — before any 'deadline' in the message runs out.

SpamCheck is not affiliated with or endorsed by the companies mentioned in this guide. Brand names are used only to help consumers identify potential impersonation scams.

Frequently asked questions

Someone called from the number on the back of my card. Can that be faked?
Yes. Caller ID is trivially spoofed, including bank numbers. Always hang up and dial the number yourself rather than trusting what appears on screen.
Should I ever send a Zelle payment to myself?
No bank will ever ask you to. That instruction is a reliable sign of fraud, and the money goes to the criminal.
I denied the transaction in the text. Was that harmful?
Replying confirms the number is live and often triggers the follow-up call. It does not give access to your account. Do not answer the call; verify in the app instead.
Is SpamCheck affiliated with Wells Fargo?
No. SpamCheck is independent and is not affiliated with, sponsored by, or endorsed by Wells Fargo. The brand is referenced only for scam identification.

Sources

SpamCheck provides informational risk assessments and cannot guarantee that any message is completely safe. When money or sensitive information is involved, independently contact the organization using a trusted phone number or website.

About SpamCheck

SpamCheck helps people understand suspicious emails by letting them forward the message to check@spamcheck.com and receive a plain-English analysis. This guide was published by SpamCheck and written and reviewed by the SpamCheck Editorial Team.

Related guides