Report Suspicious Communications and Transactions

Phishing email messages (fraudulent emails that appear to be legitimate) usually contain features that reveal their true intent – if you know what to look for:

• Often the message doesn’t address you by name. It also implies urgency, attempting to get you to act quickly before you have time to carefully read the message or examine it thoroughly.
• If you hover over a link in a phishing email, it will usually show you that it's pointing to a site different from the one stated in the message. The goal is to get you to click through to a web page where you’ll be asked to provide personal information or open an attachment that may be malicious.
• Phishing messages often contain grammar and/or spelling errors.

To report a suspicious email: please forward it to us at abuse@bankofamerica.com. We will only reply to your message if we require additional information.

See an example of a fraudulent email. Link opens in a new info modal layer

To report a suspicious text: Forward it to us immediately at abuse@bankofamerica.com. Include a screen shot or copy of the message and the number of the sender.

Remember, you should never respond to any Bank of America email with secure information.

To report a suspicious phone message: Contact us immediately to verify the validity of the message.

What is vishing? Voice phishing is an attempt by a fraudulent source to obtain your identity, credit card details or money by phone.  Be suspicious when receiving a phone call if the Caller ID or automated voice appears to be from Bank of America and asks you to confirm account details  We will never contact you asking you for your bank or credit card numbers.

If you provided your card or account information and see charges you don’t recognize, we recommend contacting the merchant to discuss the suspicious or disputed charge directly. It’s generally faster and simpler for you to resolve the issue with the merchant as opposed to going through the dispute process.

If you’ve already contacted the merchant or otherwise need to file a dispute:

For credit card charges: Sign in to Online Banking and follow the instructions.

For ATM or debit charges: Call 877.366.1121.

If you believe your identity and/or account information may have been compromised, these steps can help safeguard your identity and accounts:

1. File a report with your local law enforcement partners.
2. Contact the Federal Trade Commission to report an ID theft incident: Visit ftc.gov/idtheft or call 877.438.4338.
3. Visit OptOutPrescreen.com or call 888.567.8688 to prevent consumer credit reporting agencies from providing your information for preapproved and/or prescreened credit solicitations.
4. Place a fraud alert with a consumer credit reporting agency (you only need to notify one since they automatically notify each other). Experian (888.397.3742), TransUnion (800.680.7289) and Equifax (888.766.0008) are the 3 reporting agencies.
5. Check your credit reports to ensure that unauthorized accounts are not opened in your name. Visit annualcreditreport.com or call 877.322.8228 to request your free copy every 12 months from each consumer credit reporting agency. When reviewing your credit reports, pay close attention to the accuracy of your physical address, since that can help identify fraud. Be sure to report and file fraud claims for any accounts that aren't yours.
6. If any of your account numbers have been compromised, we recommend that you close those accounts immediately and open new accounts. To report suspicious transactions on your Bank of America accounts, follow the steps for credit card or ATM/debit card charges, as shown elsewhere on this page. A ChexSystems Alert/Consumer Report can place a security alert on compromised checking and savings accounts for 90 days to prevent accounts and services from being approved without your consent. Go to chexsystems.com or call ChexSystems at 888.478.6536.

For additional information about identity theft, visit our Fraud Prevention FAQ page.

We value the relationship with our customers across all of the Bank of America, N.A. brands. Our products and services are designed with the best interests of our customers in mind. Our employees place the highest importance on protecting customer information and preventing data loss.

If you believe you have discovered a potential security concern on any Bank of America product, application, service, or affiliated site, contact us via security@bankofamerica.com and a member of the Bank of America Security Team will reach out to you.

Please provide the following information in your email:

• Your preferred method of contact and your contact details to discuss your concern.
• A generic high level description (please do NOT include specific details of your concern until the Bank of America Security team has established a secure communication channel with you)

We ask our employees and customers to look for opportunities to “do the right thing” in every aspect of their daily lives. Please note submissions are not eligible for compensation.