Skip to content
ZeroScam
ZeroScam
SCAM💬 SMS · smishingHigh risk

"Bank Password Reset" Text Scam — Fake Undo Alert

Security notice password reset — OTP relay attack bypasses 2FA in real time

Security Notice: Your online banking password has been reset. If you did not request this, click immediately: bank-pwreset-undo.com

SMS

Confirmed scam

Password reset texts that arrive without user action are a reliable sign of account takeover attempts.

💸

Typical victim loss: $500–$5,000

FTC Consumer Sentinel 2024 — bank impersonation median $1,760

First seen

Sep 2024

Category

Financial

Attack vector

SMS

Trigger

Panic / Urgency

3 red flags in this message

1

Password reset panic

Fear that someone has your account triggers instant reaction.

2

Fake 'undo' link

There is no undo — you hand over your credentials.

3

No bank name or partial account

Works on anyone, regardless of their bank.

What happens if you click

You hand over your current credentials trying to 'undo' the reset.

Full account access lost to scammer.

Other versions of this message

Scammers rotate wording to bypass spam filters. All variations lead to the same outcome.

Your banking password was changed. Not you? Undo this: secure-bank-reset.net

ALERT: New password set for your account. Reverse unauthorized change here.

Got a similar message? Check it now.

Paste any text message or email for an instant analysis — free, no account needed.

Free · No signup · Messages never stored · ⌘↵ to analyze

Fake Bank domains used in this scam

People also search for

bank password reset text scamfake bank password reset messagebank reset password textbank password reset scamfake bank reset textbank account reset scam

Frequently asked questions

My bank password was actually reset without my doing it — what do I do?+

Call the number on the back of your bank card immediately. Do not click any link. Your bank's fraud team will guide you through recovery.

How would my real bank handle an unauthorized password reset?+

They would send an email with a secure link from their own domain, and often call you directly. They never send an 'undo' via SMS.

Is this the most dangerous banking scam type?+

It's among the most effective because it triggers immediate fear of account compromise — which ironically causes the actual compromise.

Received a suspicious message?

Free · No signup · AI-powered detection

Check your message →

First documented: September 2024

Source: FTC Consumer Sentinel 2024 — bank impersonation median $1,760

← Full scam database