High riskBank & Payment

Bank KYC Verification Scam

In this scam, a message or call impersonating your bank says your account will be frozen unless you complete 'KYC' or identity verification, linking to a fake page that captures your login, card, and personal details.

Quick verdict

Risk level
High risk
Scam type
Bank impersonation (KYC phishing)
Main red flag
A message says your account will be frozen unless you complete KYC via a link.
What to do first
Do not use the link. Complete any verification only in your bank's official app.

How this scam works

In this scam, a message or call impersonating your bank says your account will be frozen unless you complete 'KYC' or identity verification, linking to a fake page that captures your login, card, and personal details.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

In short, the giveaway is usually simple: A message says your account will be frozen unless you complete KYC via a link. Do not use the link. Complete any verification only in your bank's official app.

Scammers rotate tactics constantly, the same operation may also run the Bank Statement Text Scam and the Account Suspended Text Scam. See the full Bank & Payment Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • A KYC or verification demand with a link and deadline
  • Threats that your account will be frozen
  • A login page that is not your bank
  • Requests for full card details, PIN, or OTP
  • Pressure to act immediately

What the message looks like

Example pattern, not a real report
Example pattern: 'Your account KYC is incomplete and will be suspended today. Verify now to avoid freezing: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: A message says your account will be frozen unless you complete KYC via a link.

The scale of it

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
Source: US Federal Trade Commission
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

How to protect yourself

  • Complete verification only in your bank's official app or branch
  • Call your bank using the number on your card
  • Never share OTPs, PINs, or full card details
  • Report and delete the message

Already responded? Do this now

  • Do not enter login, card, or OTP details
  • If you shared details, contact your bank immediately
  • Change your online banking password from a trusted device
  • Review transactions for anything unfamiliar

Mistakes to avoid

  • Do not complete KYC through a message link
  • Do not share OTPs or PINs
  • Do not let freeze threats rush you

Related scams to know

High risk Text Message

Bank Statement Text Scam

This scam texts that your bank statement or account summary is ready to view and links to a fake login page that captures your online banking credentials.

Created by Scam or Safe Editorial Team
High risk Text Message

Account Suspended Text Scam

This scam texts that an account has been suspended, limited, or locked for 'security reasons' and links to a fake login page that captures your username, password, and other details.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

Fake Banking App Scam

A counterfeit banking or finance app, often spread through an unofficial app store, an advert or a link, mimics a real bank to capture your login and one-time codes. Some fakes are designed to harvest credentials directly, while others install malware that intercepts your genuine banking. Once attackers have your login and codes, they may attempt to access your real account.

Created by Scam or Safe Editorial Team

Common questions

Does my bank do KYC through a text or email link?
Genuine verification is done in the bank's app or branch, not through a link demanding your details under a deadline. Treat such messages as phishing.
Should I ever share an OTP for KYC?
No. OTPs and PINs are never needed for legitimate verification messages and should never be shared with anyone.
I entered my details. What now?
Contact your bank immediately, change your banking password from a trusted device, and review your account for unfamiliar activity.
How do I verify safely?
Use your bank's official app or visit a branch, and call the number on your card to confirm any genuine requirement.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.