Maybe you get a text about a transaction you don’t recognize. Maybe an email says your account has been locked. Maybe someone calls claiming to be from your bank and asks you to “verify” private information before they can help.

Messages like these can feel convincing, especially when they sound urgent.

Account takeover fraud happens when a scammer gains unauthorized access to an account and tries to use it as if they were the account owner. While not every suspicious message means your account has been accessed, it’s helpful to know what to watch for so you can pause, verify and take action if something feels off.

Here’s what account takeover fraud can look like, how scammers may try to collect information and what steps can help you stay safer.

What Account Takeover Fraud Means

Account takeover fraud is when a criminal gets access to an account that doesn’t belong to them. In banking, that could involve online banking, debit card information, mobile banking app, an email tied to your account, or other personal information connected to your finances.

If a scammer gains access, they may try to:

  • Transfer money
  • Change contact information
  • Reset passwords
  • Use your debit card
  • Add new payment methods
  • Lock you out of your own account
  • Gather more personal details for future scams

The good news is that many account takeover attempts begin with warning signs customers can recognize, such as an unexpected code, a suspicious link or a request for private information.

How Account Takeover Attempts Can Start

Account takeover fraud often begins with a scammer trying to collect information that could help them access an account. That doesn’t mean your account has already been accessed. It simply means the message, call or link should be handled carefully.

Common warning signs include:

Phishing Emails or Fake Texts

You may receive a message that looks like it came from your bank, a delivery service, a payment app or another familiar company. The message may ask you to click a link, verify your account or enter a code.

Scam Phone Calls

A caller may claim to be from your bank’s fraud department and say there is suspicious activity on your account. They may ask for private information, login details or a code sent to your phone.

Stolen or Reused Passwords

If you use the same password across several websites, one data breach can put multiple accounts at risk. Criminals may try that password on banking, email or payment accounts.

Compromised Email Accounts

If someone gets into your email, they may be able to reset passwords, monitor financial alerts or gather information that helps them sound more believable in a scam.

Malware or Unsafe Links

Clicking suspicious links or downloading unknown attachments can expose your device or login information.

Security reminder: The scam may not look dramatic at first. It may look like a normal message asking you to “confirm,” “verify,” or “protect” your account. When in doubt, pause and contact your bank directly used a trusted phone number.

Warning Signs to Watch For

Watch for these signs of possible account takeover fraud or attempted fraud:

  • A login alert you do not recognize
  • A password reset email you did not request
  • A verification code you did not ask for
  • A debit card transaction you did not make
  • An email saying your contact information changed
  • A message asking you to click a link to unlock your account
  • A phone call asking for your full debit card number, PIN, account number, or Social Security number
  • Trouble logging in with your usual password
  • New payees, transfers, or account changes you didn’t set up
  • A sudden request to “act now” or keep the call secret

Pause before you respond: Not every alert means fraud has happened, but it is worth slowing down before responding. Scammers often create pressure so people react quickly.

Review Fraud and Security Tips

What Banks Will Never Ask You for on a Call or Text

One of the simplest ways to spot a scam is to know what private information should not be requested in an unexpected call or text.

Important: Ergo Bank and Fiserv/Accel will never ask for your full debit card number, PIN, account number, or Social Security number if we are calling you directly. If you receive a suspicious or fraudulent phone call, call us immediately using a trusted phone number.

Be careful if someone asks for:

  • Your full debit card number
  • Your PIN
  • Your full account number
  • Your Social Security number
  • Your online banking password
  • A one-time security code
  • Remote access to your phone or computer
  • Payment through gift cards, wire transfers, or cryptocurrency

If a message or call claims to be from your bank, do not use the phone number or link in the message. Call your bank directly using a trusted number from the official website, your statement or a known branch contact.

What to Do If Something Feels Off

If you receive a suspicious message, call or alert, you do not need to panic. Start by slowing down and avoiding any action the message is pressuring you to take.

Here are a few steps that can help:

  1. Do not click any links in the suspicious message.
    If the message came by text or email, avoid clicking, downloading or replying.
  2. Do not share codes or private information.
    A scammer may say they need the code to “stop fraud,” but that code may actually help them get into your account.
  3. Call your bank directly using a trusted phone number.
    Use the number from the official website, your bank statement or a known branch number.
  4. Review your recent account activity.
    Look for transactions, transfers, contact changes or login activity you do not recognize.
  5. Change passwords from a secure device.
    Update your online banking password and email password if you think either may be compromised.
  6. Use card controls if that option is available.
    Card controls can help you manage debit card activity while you review the situation.
  7. Write down what happened.
    Save screenshots, phone numbers, email addresses, dates and details. This can help when reporting the issue.

If you are unsure whether a message or call is legitimate, it is always okay to verify directly with the bank. A quick check can help you understand whether action is needed.

Call or Visit Ergo Bank

How to Lower Your Risk Going Forward

You cannot prevent every scam attempt from reaching your phone or inbox, but you can make it harder for someone to misuse your information.

A simple account security checklist includes:

  • Use strong, unique passwords for online banking and email
  • Avoid reusing passwords across accounts
  • Turn on multi-factor authentication when available
  • Keep your phone number and email updated with your bank
  • Set up transaction alerts when available
  • Review account activity regularly
  • Be cautious with links in texts and emails
  • Do not share one-time codes with anyone who contacts you
  • Keep your devices updated
  • Use card controls if available
  • Call your bank directly when something feels suspicious

Helpful habit: The habit that helps most is slowing down. If a message creates panic, pressure, or confusion, pause and verify before taking action.

How Ergo Bank Helps Customers Stay Safer

Fraud prevention works best when customers know what to watch for and have a trusted place to turn when something does not feel right.

We share fraud and security reminders to help customers protect personal information, recognize suspicious requests and know what we or Fiserv/Accel will never ask for during a direct call.

CardHub features may also help you manage debit card activity by turning your card on or off, setting certain card controls, reviewing transactions and checking spending insights.

If you receive a suspicious call, text, or email, or if you notice account activity you don’t recognize, contact Ergo Bank directly. You can also visit a local branch or use a trusted contact method listed on our website.

A few minutes of caution can save a lot of stress later.

Learn More About CardHub and Security Tips

FAQs About Account Takeover Fraud

Here are a few common questions customers may have about account takeover fraud, suspicious messages, and what to do if something does not feel right.

What is account takeover fraud?

Account takeover fraud happens when someone gains unauthorized access to an account and tries to use it as if they were the account owner. They may attempt to move money, change information, reset passwords or make transactions.

How do criminals take over bank accounts?

Criminals may use phishing emails, fake text messages, scam phone calls, stolen passwords, compromised email accounts or malware to try to collect personal and financial information.

What are the first signs of account takeover?

Early warning signs may include login alerts you do not recognize, password reset emails you did not request, suspicious transactions, unexpected verification codes or messages asking you to verify private information.

Does a suspicious text mean my account has been accessed?

Not always. A suspicious text, email or call may be an attempt to collect information. Do not click links or share personal details. If you are unsure, contact your bank directly using a trusted phone number.

What should I do if I clicked a suspicious banking link?

Stop entering information, close the page and contact your bank directly using a trusted phone number. You may also need to change your password from a secure device and review your account activity.

Will Ergo Bank ask for my full debit card number, PIN, account number or Social Security number?

No. Ergo Bank and Fiserv/Accel will never ask for your full debit card number, PIN, account number or Social Security number if they are calling you directly.

How can I protect my online banking login?

Use a strong, unique password, avoid reusing passwords, turn on multi-factor authentication when available and never share one-time security codes with someone who contacts you unexpectedly.

Can card controls help prevent debit card fraud?

Card controls may help you manage debit card activity by turning a card on or off, setting certain restrictions and reviewing transactions. They are a helpful tool, but you should still contact your bank if you see suspicious activity.

Who should I call if I think my account has been compromised?

Call Ergo Bank directly using a trusted phone number from the official website, your statement or a known branch contact. Do not use phone numbers or links from suspicious messages.