Fraud Alert: The Scams Showing Up in Texts, Calls, and Online Searches
Scams do not always look suspicious.
A message may appear to come from a lender, a rewards program, your credit union, an employer—or even a government agency. The common thread is pressure: act now, keep it secret, share a code, or move money before you have time to verify the request.
Recent 2026 alerts from the Federal Trade Commission (FTC) and the FBI Internet Crime Complaint Center (IC3) highlight several tactics consumers should recognize. The patterns can change, but the safest response stays the same: slow down, use a trusted way to verify, and protect your information and money.
This guide explains how the latest scams work, what warning signs to look for, and what to do before or after you respond.
Keep this rule in mind: Your credit union will not ask you to share a one-time verification code or move money to a “safe” account to protect it.
1. Fake loan preapproval or application texts
How it works: You receive a text saying you are preapproved for a loan or that an application needs one final step—even though you never applied. The sender may ask you to reply “YES,” click a link, or provide your Social Security number, account information, or other sensitive details.
Warning signs:
You do not recognize the lender or did not start a loan application.
The message creates urgency or asks for personal information by text.
The link or phone number does not clearly match the lender’s official website or contact information.
What to do: Do not reply, click the link, or call the number in the message. Delete it, report it as junk, and contact your credit union or the lender through a trusted number you find on your card, statement, or official website. The FTC issued a consumer alert about fake loan texts in January 2026.
2. “Fraud department” impersonators
How it works: A caller or texter claims there is suspicious activity on your account. They may tell you to move money to a “safe” account, share a one-time verification code, or approve a transfer to stop the supposed fraud. In reality, the request may help the scammer take over your account or persuade you to send the money yourself.
Warning signs:
The contact is unexpected and insists you must act immediately.
The person asks for a one-time code, password, PIN, or full account details.
You are told to keep the conversation secret or move funds for protection.
What to do: Never share a verification code and never move money because of an unexpected call, text, or email. End the conversation and contact your credit union directly using the number on your card or statement. An FTC alert has warned consumers about this impersonation pattern.
3. Government or law-enforcement threats
How it works: Scammers pose as police, courts, or government agencies. They may use spoofed caller ID, official-looking credentials, or AI-enhanced video calls. Common claims include a missed jury duty obligation, an arrest warrant, or a problem with a license or passport that must be fixed immediately.
Warning signs:
The caller threatens arrest, legal action, or public embarrassment unless you pay.
Payment is demanded by cryptocurrency, gift card, prepaid card, or courier delivery.
The caller discourages you from checking with the agency independently.
What to do: Stop the conversation. Government and law-enforcement officials will not demand payment or sensitive information by phone or text, and they will not require these unusual payment methods. Verify independently through a trusted .gov website or a publicly listed phone number. The FBI warned about this ongoing trend in a September 17, 2026 public service announcement.
4. Fake job and “task” offers
How it works: An unexpected text, WhatsApp message, or Telegram message promises easy remote work, fast pay, or money for rating products online. After building trust, the scammer may ask you to deposit money, buy equipment, pay a fee, or send back part of a check.
Warning signs:
The job arrives unexpectedly from a generic number or an unknown account.
The pay sounds unusually high for simple work, or the details are vague.
You must pay money, deposit a check, buy items, or recruit others before receiving earnings.
What to do: Never pay to get a job or receive earnings. Be cautious with generic job messages and verify openings through the employer’s official careers page—not through a link or contact supplied by the sender. The FTC highlighted this tactic in an April 30, 2026 alert.
5. “Your points expire today” texts
How it works: A message appears to come from a rewards program and pressures you to click before your points expire. The link may lead to a fake sign-in page designed to steal credentials or may attempt to install harmful software.
Warning signs:
The message uses a deadline or warning to make you act without checking.
The sender, link, or web address is unfamiliar or slightly misspelled.
You are asked to sign in or provide payment information through the text link.
What to do: Open the company’s official app or type its known web address yourself. Do not use a link in an unexpected text. Keep your phone updated and use its built-in spam-reporting tools. The FTC issued guidance about expiring-rewards texts in April 2026.
6. Fake websites in ads and search results
How it works: Fraudsters use deceptive ads, manipulated search results, and look-alike web addresses to route people to fake login pages or malware. A site may look polished and familiar while using a slightly altered address or an imitation of a financial institution’s name.
Warning signs:
The web address contains extra words, unusual characters, or a misspelling.
A sponsored result appears before the institution’s known website and asks you to sign in immediately.
The page pressures you to download software or provide more information than expected.
What to do: Inspect the web address before entering credentials. When possible, use a saved bookmark, your credit union’s official app, or type the address yourself instead of clicking a sponsored ad. The FBI warned about search-result redirection tactics in a June 18, 2026 public service announcement.
Stop. Verify. Protect.
Pause whenever a message creates urgency, fear, or excitement. Use this checklist before you click, reply, approve a transfer, or share information:
STOP
Do not rush, click, reply, call the number provided, or move money while you feel pressured.
VERIFY
Contact the organization through a trusted number, official app, saved bookmark, statement, or card. Do not use contact details supplied in the unexpected message.
PROTECT
Never share a one-time verification code. Never move money to “protect” it. Report suspicious activity promptly.
Before you respond
Check whether you expected the contact or recently started the application, purchase, job search, or account activity mentioned.
Look closely at the sender name, phone number, email address, link, and web address.
Verify independently using the trusted number on your credit union card or statement, the official app, or a known website.
Ask someone you trust to review the request if it involves money or sensitive information.
If you responded to a scam
Contact your credit union immediately using the trusted phone number on your card or statement. Explain what happened and follow its instructions.
Save the texts, emails, phone numbers, usernames, links, screenshots, receipts, and transaction details. Do not continue the conversation with the scammer.
Change exposed passwords from a trusted device and ask your credit union whether additional account protections are appropriate.
Report the incident at ReportFraud.ftc.gov. Use IC3.gov when the situation involves online crime, digital payment fraud, or another matter appropriate for the FBI’s Internet Crime Complaint Center.
Remember: The NCUA has emphasized that fraud and scams targeting members and financial institutions continue to require prompt reporting and strong controls. Reporting quickly can help your credit union and law enforcement understand what happened and respond appropriately.