A text pops up saying your debit card has been locked. An email asks you to verify a payment. A delivery message says a package can’t be dropped off until you update your address. At first glance, these messages may look routine. That’s what makes phishing scams so effective.

Phishing messages are designed to look like they came from a company, bank, school, delivery service, or other trusted source. The goal is usually to get you to click a link, reply with personal information, share a verification code, or make a payment before you have time to think it through. The Federal Trade Commission describes phishing as an online scam where a message appears to come from a known source, such as a bank or mortgage company, and asks for personal identifying information.

The good news: a quick pause can make a big difference. Once you know what to look for, many phishing examples become easier to recognize.

Quick Navigation

What Is Phishing?

Phishing is a scam where someone pretends to be a trusted organization or person to trick you into sharing private information, clicking a harmful link, or sending money. Phishing scams can happen by email, text message, phone call, social media message, or through a fake website.

Why Phishing Scams Are Getting Harder to Spot

Older phishing messages were often easier to catch. They might have included obvious spelling mistakes, strange formatting, or email addresses that looked suspicious right away. Today’s scams can be much more polished.

Some phishing text messages and emails use familiar logos, realistic wording, and urgent warnings. Others may appear to come from a company you actually use. Bank phishing scams may even imitate fraud alerts, card lock notices, or account verification requests.

Scammers may also spoof phone numbers, which means a call or text can appear to come from a familiar area code or company. Some messages are written in a friendly, professional tone, making them harder to dismiss as obvious fraud.

That is why online banking safety often starts with one simple habit: don’t respond directly to a message that creates pressure. Check it another way first.

5 Real-World Phishing Examples to Watch For

Phishing scams can show up in everyday moments, especially when you are busy, distracted, or already expecting a message. Here are five common examples and what to do if you receive one.

1. A Fake Bank Fraud Alert Text

A fake bank text message may say something like:

“First Bank Alert: Did you authorize a $487.22 transaction? Reply YES or NO. If no response, your account may be locked.”

This type of message feels believable because banks do monitor for suspicious activity. It may also create a sense of urgency by suggesting your account is at risk.

Red flags to notice:

  • The message asks you to click a link to “unlock” or “verify” your account.
  • It requests your password, PIN, full account number, debit card number, or security code.
  • It pressures you to respond immediately.
  • The link does not go to the official website.

What to do instead: Do not click the link or reply with personal information. If you are concerned, contact us directly using a trusted number, visit your local branch, or go to our website by typing the address into your browser. You can also review recent transactions through secure Online Banking.

2. A Fake Package Delivery Message

A delivery-related phishing text may say your package is delayed because of an address problem, unpaid fee, or missed delivery. It may include a link to “reschedule” or “confirm shipping details.”

These messages work because many people regularly order online. If you are expecting a package, the message may feel timely.
Watch for signs such as:

  • A link that looks unusual or does not match the delivery company’s official website.
  • A request for payment to release a package.
  • Vague wording that does not include a real tracking number.
  • A message from an unknown number with no clear sender.

If you receive a delivery message, go directly to the retailer’s website or the delivery company’s official site. Use the tracking number from your original order confirmation, not a link from the message.

3. A Fake Account Verification Email

Email phishing scams often claim there is a problem with an account you use. The email may say your online banking access, streaming account, email account, or payment profile will be suspended unless you verify your information.

Here is why this one can be convincing: the email might include a logo, a button, and language that sounds professional. It may even reference “security” or “account protection.”

Before clicking, look closely at:

  • The sender’s email address.
  • The link destination, especially if it appears different when you hover over it.
  • Unexpected attachments.
  • Generic greetings such as “Dear customer.”
  • Any request for sensitive information.

A legitimate security message should not require you to share your password, verification code, or full account number by email. If you are unsure whether an online banking message is real, open a new browser window and go directly to the official website.

4. A Fake School, Activity, or Payment Request

Some phishing scams are built around real responsibilities, such as school fees, sports dues, fundraiser payments, club activities, or event registrations. The message may appear to come from a teacher, coach, association, or parent group.

This scam can feel believable because the amount may be small, the request may sound routine, and families often juggle several activities at once.

Common warning signs include:

  • A request to pay through an unfamiliar app or link.
  • A sudden change in payment instructions.
  • A message that says payment is due “today only.”
  • A sender address that does not match the school or organization.
  • Wording that feels slightly off compared with normal communication.

If you receive a payment request, check through a trusted channel. Call the school office, message the coach or organizer through a platform you already use or visit the official website. Avoid sending money based only on a link in an unexpected text or email.

5. A Fake Security Alert or Password Reset Message

A fake security alert may say someone tried to log in to your account. Another version may claim your password expired and must be reset immediately.

This type of message gets attention because it sounds like a protective warning. Scammers know people are more likely to act quickly when they think an account has been compromised.

Red flags may include:

  • A password reset link you did not request.
  • A request for a one-time verification code.
  • A message saying your account will close if you do not act right away.
  • A login page that looks real but has a strange web address.

If you receive a password reset email or text you did not request, do not use the link. Go directly to the account’s official website or app. If your password truly needs to be changed, you can do it safely from there.

What to Do If You Think You Responded to a Phishing Scam

If you clicked a suspicious link or shared information, try not to panic. Acting quickly can help reduce the risk.

What should you do if you clicked a phishing link?

  1. Stop communicating with the sender. Do not reply again, click additional links, or provide more information.

  2. Disconnect if something downloaded. If you believe a file or app was installed, stop using that device for banking until it has been checked.

  3. Change passwords from a secure device. Start with the account involved, then update any other accounts that use the same or similar password.

  4. Contact the bank or company directly. If banking information was involved, call us using a trusted number or visit a local branch.

  5. Monitor your account activity. Review recent transactions and keep checking for anything you do not recognize.

  6. Report suspicious activity. Reporting helps protect your account and may help others avoid similar scams.

  7. Consider identity theft steps if sensitive information was shared. If you provided your Social Security number or other personal identifying information, visit trusted resources such as the FTC’s identity theft guidance. The FTC notes that scammers may use personal information gathered through phishing to open new accounts or access existing accounts.

If you are a First Bank customer and something feels off, please reach out. You can contact us directly or visit one of our locations.

How First Bank Helps Customers Stay Informed

Fraud prevention works best when customers know what to look for and feel comfortable asking questions. We provide practical information to help customers recognize suspicious messages, protect their First Bank account, and use online banking safely.

Our Fraud Prevention resources are a helpful place to start if you want to learn more about common scams and account protection. If you receive a message that claims to be from us and you are not sure it is legitimate, contact us before clicking, replying, or sharing information.

A real concern deserves a real conversation. We would rather have you check first than feel pressured into responding to a message that may not be safe.

FAQs About Phishing Scams

What is the most common sign of a phishing scam?

One of the most common signs is urgency. The message may say your account will be locked, a payment is overdue, or suspicious activity has been detected. Scammers use pressure to get you to act before you verify the request.

Can phishing happen through text messages?

Yes. Phishing can happen through text messages, emails, phone calls, social media messages, and fake websites. Phishing text messages are sometimes called “smishing.” The FDIC notes that scammers may use texts, emails, and phone calls to impersonate banks or other trusted organizations.

What should I do if I clicked a suspicious link?

Stop interacting with the message, change any affected passwords from a secure device, monitor your accounts, and contact the company or bank directly. If you shared banking information, contact us right away using a trusted phone number or visit a branch.

Will my bank text me asking for my password?

No. Your bank should not ask you to provide your online banking password, PIN, full account number, or verification code by text or email. If a message asks for that information, treat it as suspicious and contact the bank directly.

How do I report a suspicious banking message?

If the message appears to involve your First Bank account, contact us directly through a trusted phone number, our Contact Us page, or your local branch. Do not use contact details from the suspicious message itself.

How can I protect older family members from phishing scams?

Talk through real phishing examples together. Encourage them to pause before responding, avoid clicking unexpected links, and call a trusted family member or their bank if something feels suspicious. It can also help to bookmark official banking, insurance, medical, and payment websites so they do not have to rely on links in messages.