October 4, 2024
Written by Greg Sandler
Certified Financial Education Instructor®
Certified Financial Education Instructor®
Greg Sandler, CFEI®, is a business and finance writer who has written for hundreds of publications, businesses, financial institutions, organizations, and government agencies. Check out his profile on LinkedIn.
Imagine you're going about your day when suddenly you get a text that looks like it's from "Chime" warning you about a transaction you don't recognize. Panic sets in – did you lose your card? Or did someone steal your account information?
But before you click the link in the text, think twice. Could this be a scam?
Scammers regularly pose as legitimate companies and use text messages with malicious links to steal personal information and login credentials. This is called SMS phishing. Read on to learn how you can avoid falling victim to this scam.
SMS phishing, also known as "smishing," is when scammers use text messages to try to steal or compromise your personal information.1
Your next logical question may be: what is phishing? Phishing is the general name for a type of cyber-attack in which scammers try to trick you into revealing sensitive personal information or downloading malware.2 Phishing can be done through any means: email, text, phone calls, and more.
One type of smishing involves messages about suspicious activity on your account, like a transaction or changes to your account information, that require immediate action. These messages typically include a link to a fake website that is designed to steal your login credentials.3 What's more, if you look closely at the sender's address, it won't be from an official bank email address or phone number.
Scammers often try to impersonate Chime support to convince you to give away your account information. Here is a real example of a scam text pretending to be from Chime:
Phishing messages might claim there's an issue with a package delivery and urge you to click a bogus link or call a number to resolve the problem. Be careful!
Scammers often impersonate well-known shipping companies or the federal postal service. If you look closely, the details of the recipient or where they're asking you to go won't look authentic. A message from "USPS," for instance, might ask you to click to "Usps.post.xqw.als" or a similar bogus address.
Scammers sometimes target your hopes and dreams. They may, for instance, send you a text message or email that says "you've won" cash or a gift: just click their link to claim your prize. Or, "click this link to enter our sweepstakes."
Don't do it! If something sounds too good to be true, it probably is.4
Here are some tips to help you avoid phishing scams:
Be skeptical of unsolicited messages: If you weren't expecting a text from someone, be very cautious about responding.
Don't click on links in suspicious texts: Instead, verify the sender by typing the official URL of the company that supposedly sent the message directly into your browser.
Verify the sender: Scammers may follow up a smishing attempt with a phone call impersonating a legitimate company, like Chime, and give you a bogus number to call back. Only call the official phone numbers listed on the back of your card or on the card issuer's website. Do not call any unverified phone number that was included in a suspicious text message or given to you via a phone call or voicemail.
Check for spelling and grammar errors: Legitimate companies usually have proofreading processes in place, so errors can be a red flag for phishing scams.
Be suspicious of urgent requests: Scammers often create a false sense of urgency in order to trick you.
Use two-factor authentication: This extra layer of security makes it more difficult for scammers to gain access to your accounts.5
Keep your phone's software updated: Regular updates often include security patches that protect against new threats.
Install a reputable mobile security app: Using a layer of security software can help you identify and block potential phishing attempts.6
If you receive a suspicious text, do not click on any links or call any numbers included in the message. If you think it's a phishing scam, there are several steps you can take:
Forward the message to 7726 (SPAM) in the United States. This reports the message to your mobile phone carrier.7
Report it to the Federal Trade Commission.
Contact your financial institution. If you've fallen victim to any kind of scam, notify your bank immediately and consider placing a fraud alert and freezing your credit reports.
Staying vigilant is the key to protecting yourself from smishing attempts. You can reduce your risk of falling victim to smishing scams by approaching all suspicious text messages with caution.
When in doubt, don't click or respond. While you may feel urgency to respond to new pings and texts, clicking on fake links can be a disaster. When it comes to suspicious links, treat the safety and security of your personally identifiable information and accounts like gold.
For more information on staying safe online, find out how to avoid scams that target Chime members.
Smishing is a type of cyberattack via text in which bad actors try to trick you into clicking a bogus link.
To try and avoid phishing scams, be skeptical of unsolicited messages and don't click on any suspicious links.
If you've been a victim of a phishing scam, forward your message to 7726 (SPAM) and notify your bank immediately.
Chime® is a financial technology company, not a bank. Banking services provided by The Bancorp Bank, N.A. or Stride Bank, N.A., Members FDIC.
Chime is not FDIC-insured. The Bancorp Bank, N.A. and Stride Bank, N.A. are the FDIC-insured members. Deposit insurance covers the failure of an insured bank. Certain conditions must be satisfied for pass-through deposit insurance coverage to apply. FDIC deposit insurance limit is $250,000 per depositor, per insured bank, per ownership category.
Chime Checkbook: While Chime doesn’t issue personal checkbooks to write checks, Chime Checkbook gives you the freedom to send checks to anyone, anytime, from anywhere. See your issuing bank’s Deposit Account Agreement for full Chime Checkbook details.
By clicking on some of the links above, you will leave the Chime website and be directed to a third-party website. The privacy practices of those third parties may differ from those of Chime. We recommend you review the privacy statements of those third party websites, as Chime is not responsible for those third parties' privacy or security practices.
Opinions, advice, services, or other information or content expressed or contributed here by customers, users, or others, are those of the respective author(s) or contributor(s) and do not necessarily state or reflect those of The Bancorp Bank, N.A. and Stride Bank, N.A. (“Banks”). Banks are not responsible for the accuracy of any content provided by author(s) or contributor(s).
APPLE and the Apple Logo are registered trademarks of Apple Inc. GOOGLE PLAY and the Google Play Logo are registered trademarks of Google LLC. Third-party trademarks referenced for informational purposes only; no endorsements implied.
This guide is for informational purposes only. Chime does not provide financial, legal, or tax advice. You should check with your legal, financial, or tax advisor for advice specific to your situation.
Third-party trademarks referenced for informational purposes only; no endorsements implied.
Licenses
Chime Capital, LLC, Nationwide Multistate Licensing System ("NMLS") ID 2316451
Chime Payments, Inc., Nationwide Multistate Licensing System (“NMLS”) ID 2538752
Address: 101 California Street, Floor 5, San Francisco, CA 94111, United States.
No customer support available at HQ. Customer support details available on the website.
© 2013-2026 Chime Financial, Inc. All rights reserved.
Chime® is a financial technology company, not a bank. Banking services provided by The Bancorp Bank, N.A. or Stride Bank, N.A., Members FDIC.