Mobile text - shortcode numbers Page Article Receiving a text from a short number (also called a shortcode) that appears to be from your bank does not automatically guarantee it is legitimate. While many legitimate companies, including banks, use shortcodes to send texts for things like account alerts, two-factor authentication (2FA), and fraud notifications, scammers can also use shortcodes to impersonate banks. Here’s how you can protect yourself:Signs That a Shortcode Text is Legit:You’ve opted in: You’ve signed up for alerts or notifications from your bank or credit union, and you’re expecting a message from them.The content matches expectations: The text contains information that aligns with previous messages you’ve received from your bank or credit union, such as confirming a transaction you recognize.No sensitive information requested: Legitimate texts from financial institutions will never ask for personal information like your password, PIN, Social Security number, or card details.It includes a reference number or transaction: Banks and credit unions often reference specific details of a transaction or alert you to verify a transaction without asking for sensitive information.Red Flags That a Shortcode Text Could Be a Scam:Unexpected messages: If you receive a text out of the blue claiming urgent action is required on your account, but you weren’t expecting it, be suspicious.Request for personal information: If the text asks you to confirm details like your password, PIN, Social Security number, or CVV, this is a huge red flag. Legitimate banks will not ask for this information over text.Suspicious links: Be wary of links in texts. Instead of clicking, go directly to your bank’s website or app, or call their verified customer service number to confirm the message.Spelling or grammar mistakes: Many scam texts will contain subtle errors, like poor grammar or odd phrasing, that wouldn’t be present in official communications from your bank or credit union.What to Do If You’re Unsure:Contact your bank or credit union: Use the official phone number on the back of your card or your bank’s website to verify the message.Don’t click links: Instead of clicking any links in the message, log into your financial institution’s app or website manually to verify any potential issues with your account.Delete or block: If you believe the text is a scam, delete it and block the number.Shortcode texts can be legitimate, but it’s important to stay cautious and verify before taking any action.