How Can I Recognize Phishing Emails and Text Messages?

Phishing is when scammers send you emails or texts impersonating a bank or other trusted source to trick you into giving out personal information. These messages often sound urgent or scary to make you act quickly (“Your account will be closed – click here now!”).

Check the Sender and Message Carefully

Look closely at who the message is really from.

What to look for:

• Email address or phone number: Is it from an official address (like @bankofmarin.com) or a random Gmail/odd number?
• Phishing emails often come from slightly misspelled or unofficial addresses
• Scam texts come from unfamiliar numbers
• Generic greetings: Messages that say “Dear Customer” instead of your name are suspicious
• Spelling mistakes: Real banks proofread their messages carefully

Red flags:

• The sender’s email doesn’t match the company’s official domain
• The message has poor grammar or unusual phrasing
• The greeting is impersonal

Beware of Urgent Requests and Links

Scammers try to alarm you to make you act without thinking.

Common tactics:

• Claims of “unusual activity on your account”
• Warnings about a “payment problem”
• Threats that your account will be closed
• Urgent requests to “verify your information immediately”

What to do:

• Don’t click any links or open attachments from unexpected messages
• Links could steal your information or install malware
• A real bank will not ask you to verify your account or password via an email link
• If you think the alert might be real, contact the bank directly (see below)

Never Give Out Personal Info via Email or Text

This is the most important rule to remember.

Banks will NEVER email or text asking for:

• Your password or PIN
• Your Social Security number
• One-time verification codes
• Your full account number
• Any sensitive personal information

If you get a message asking for this information, it’s a scam. Period.

What to Do Instead

If you receive a suspicious message but think it might be real:

1. Do NOT click any links in the message
2. Do NOT reply to the message
3. Do NOT call any phone number provided in the message
4. Instead, contact the bank directly using a method you know is real:
   • Call the number on the back of your card
   • Visit the bank’s official website by typing the address yourself (not clicking a link)
   • Visit a branch in person

The Bottom Line

Never trust messages that ask you to click a link or call a number out of the blue. Reach out to the company using contact information you know is real. Taking a moment to verify can save you from identity theft and financial loss.

Need Help?

If you’ve received a suspicious message claiming to be from Bank of Marin, contact us at (866) 626-6004 to verify its authenticity.