High riskBank & Payment

Wallet Provisioning Scam

In this scam, a fraudster who has your card details triggers a request to add your card to their mobile wallet, then calls or messages posing as your bank to get you to share the one-time code that authorises it.

Quick verdict

Risk level
High risk
Scam type
Card provisioning fraud
Main red flag
Someone asks for the OTP needed to 'verify' your card, which actually adds it to their wallet.
What to do first
Never share an OTP; a code to 'verify your card' can authorise wallet provisioning.

What this scam usually looks like

In this scam, a fraudster who has your card details triggers a request to add your card to their mobile wallet, then calls or messages posing as your bank to get you to share the one-time code that authorises it.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

The single clearest warning sign to remember is this: Someone asks for the OTP needed to 'verify' your card, which actually adds it to their wallet. Never share an OTP; a code to 'verify your card' can authorise wallet provisioning.

Not sure this matches what you received? Compare it with the Cardless ATM Scam or the PayPal Payment Pending Scam, browse the Bank & Payment Scams guides, or paste the exact message into our free scam checker.

By the numbers

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
Source: US Federal Trade Commission
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

Example message pattern

Example pattern, not a real report
Example pattern: 'This is your bank. To verify your card, read us the code we just sent.' The code adds your card to the scammer's phone wallet.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Why this is a red flag: Someone asks for the OTP needed to 'verify' your card, which actually adds it to their wallet.

Red flags to watch for

  • A request to read out an OTP to 'verify your card'
  • An unexpected wallet or card-verification code
  • A caller posing as your bank
  • Pressure to share the code quickly
  • Spending alerts from a wallet you did not set up

What to do

  • Never share OTPs or verification codes with anyone
  • Hang up and call your bank using the number on your card
  • Report any wallet added without your knowledge
  • Set up transaction alerts to catch misuse

If you already clicked or replied

  • If you shared a code, contact your bank immediately to block the card
  • Ask the bank to remove the card from any unknown wallet
  • Change your online banking password from a trusted device
  • Review and report unauthorised transactions

What not to do

  • Do not share OTPs or card codes, even with 'the bank'
  • Do not act on pressure to verify quickly
  • Do not call back on a number the caller gives

Similar scams

High risk Bank & Payment

Cardless ATM Scam

This scam exploits cardless ATM features, where a fraudster who has phished your login or one-time code generates a withdrawal code in your banking app and takes cash from an ATM without your physical card.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

PayPal Payment Pending Scam

This scam shows a fake 'payment on hold' message claiming funds will be released once you ship an item or confirm details, but no real payment exists.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

Fake Bank Alert Text Scam

This scam sends a text claiming suspicious activity on your account, then steers you to a fake login page or a 'fraud agent' who pressures you to move money.

Created by Scam or Safe Editorial Team

Frequently asked questions

How does wallet provisioning fraud work?
A fraudster with your card details starts adding your card to their wallet, then gets you to share the OTP that authorises it, letting them pay with your card.
Why should I never share an OTP?
OTPs authorise actions like adding your card to a wallet or approving payments. Sharing one can hand control of your card to a scammer.
I shared a code. What now?
Contact your bank immediately to block the card and remove it from any unknown wallet, change your banking password, and review transactions.
How do I spot this?
Be wary of any request to read out a code to 'verify your card', and watch for wallet or spending alerts you did not set up.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.