Give me a great movie and a big tub of buttery popcorn with some jalapeños on the side, and I am a happy man. But imagine settling into your reclined seat, going to silence your phone and seeing one last text pop up just as the lights go down in the theater:

“BANK OF UTAH FRAUD ALERT: A $487 purchase was flagged on your debit card. Verify your account immediately to prevent your card from being suspended.”

A genuine message will give you time to verify it, and you can always reach out to us with a simple, "I got this text. Can you help me check if it's real?"

Below the message sits a lone link, offering what looks like an easy, one-tap fix to clear up the problem.

You read the text again. You definitely did not spend $487 tonight. Could it be something your spouse ordered? A forgotten bill? The message looks real.

Now the movie has started, but you can't stop thinking about your checking account. Could someone be clearing out your balance right now? Naturally, you want to take care of it before slipping your phone away.

That sudden urge to fix the problem immediately is by design. Scammers rely on fast reactions to catch people off guard.

In my work at Bank of Utah, I always encourage team members and customers to pause whenever something feels off.

With October being Cybersecurity Awareness Month, it’s the perfect time to refresh your security habits. Here are five simple steps to take in exact order when a strange text pops up so you can sit back and enjoy the show.

Quick Safety Checklist: Received a suspicious text? Do not click the link and never share your passwords or security codes. Instead, call your bank using the trusted phone number on the back of your debit card or official website. If you already shared information or sent money, reach out to your bank right away.

1. Pause Before You Tap

When a sudden fraud alert pops up on your screen, your first reaction is to tap the link immediately to protect your money. Taking a moment to pause before you tap is like watching the previews before the main feature. The previews give you a quick glimpse of what’s coming so you can figure out what’s actually going on before you commit. Taking that same beat with an unexpected text lets you see past the panic and evaluate what the message is really asking before you act.

Before you reply or tap a link, take a breath and ask yourself one simple question: What is this message actually asking me to do?

Red flags should go off if the sender wants you to:

  • Click a link to "verify" an account or cancel a charge.
  • Type in your Online Banking username or password to prove who you are.
  • Share a one-time security code that just popped up on your phone.
  • Provide your debit card number, PIN or a picture of your card.

You might remember hearing that bad grammar or typos are the main signs of a scam. While that can still be true, modern scammers have gotten much slicker.

Artificial intelligence has made fraudulent messages harder to spot than ever. Scammers use AI tools to fix spelling, draft convincing texts and even clone human voices. The FBI has warned that these tools make fake requests look remarkably authentic. Focus entirely on what is being requested rather than how polished the message looks.

2. How to Double-Check a Message

Silencing your phone before the movie starts is second nature. Make checking a surprise text just as automatic: verify the source through official channels before you trust what's on your screen.

When worry sets in, it is tempting to tap whatever phone number or link is sitting right in front of you. But that callback number in a text message usually leads straight to the scammer.

Try this approach instead:

  • Set the message aside: Skip the links and callback numbers provided in the text.
  • Open your banking app*: Log in directly to check your actual recent transaction history.
  • Use a known number: Call the number printed on the back of your debit card, or look up our official web address directly in your browser.

*Internet capability required for Mobile Banking. Message and data rates may apply. Contact your wireless provider for details.

The Federal Trade Commission always recommends verifying surprising requests through trusted contact info you look up yourself. A recognizable bank logo or caller ID display simply is not enough proof anymore.

Even if you do not see the strange charge in your app, give us a call if you feel uneasy. You can simply tell our team members, "I received a strange text about a charge, and I want to make sure my account is secure."

Pro tip: Save your bank's verified customer support number into your phone contacts right now so it is ready whenever you need it.

3. Keep Security Codes Strictly to Yourself

Treat your security codes like cinema silence. They are meant strictly for your eyes, and holding onto them keeps unwanted intruders out of your account.

Imagine a friendly voice on the phone saying, "I can help cancel that unauthorized charge right now. I just sent a code to your phone. Can you read that back to me?" They sound helpful, you are worried about your balance, and this feels like an easy fix.

However, that secret code is often the final key someone needs to log into your account. Treat verification codes like private passwords. Only use them for actions you started yourself on an official app or website.

Bank of Utah team members will never call, text or email you to ask for your debit card numbers, photos of your cards, account passwords or texted security codes.

If you want a fun way to test your instincts, check out the American Bankers Association’s Banks Never Ask That! campaign. They offer quick quizzes that cover common tricks like asking for PINs, demanding secrecy or pressuring you to send money through cash apps. Try taking it with your spouse, teenager or parents; it's a great way to kick off an open conversation about staying safe online.

If you ever accidentally share a code, call your bank immediately so we can help protect your account.

4. What to Do If You Responded to a Scam

Responding to a scam is a lot like spilling something during the movie — it happens in a flash, but you don't have to handle it on your own. Just like you'd ask an employee who has the right supplies to help, bring our team into the loop. We have the tools to help protect your account and guide you through what to do next.

Maybe you tapped the link before thinking twice. Maybe you shared a code before the conversation started feeling strange. Or maybe you are worrying about a text you answered yesterday. Please, give us a call. You do not have to wait until money goes missing to ask for support, and you never need to feel embarrassed. Our team members are here to help clean up the situation.

You can simply tell us: "I thought I was talking to the bank earlier, but now I'm worried it was a scam."

To help us protect you quickly, let our team member know:

  • What you clicked: Did you enter details on a webpage, download a file or give someone remote access?
  • What you shared: Did you give out passwords, card details or security codes?
  • If money moved: Let us know the approximate amount, time and method used.
  • Your recent steps: Mention if you have already changed passwords or turned off your debit card.

If money was sent, we will check right away to see if the transfer can be stopped or reversed. Swift action gives us the best chance to help.

If you think your Bank of Utah information was compromised, call our Client Service team immediately at 801-409-5000.

If your personal details were exposed, we can also walk you through the recovery process. Bank of Utah checking accounts include Identity Theft Recovery Services through NXG Strategies at no extra cost, extending to qualified family members in your household. A dedicated recovery advocate can help place credit freezes and coordinate with creditors to clear up fraudulent activity. Give us a call or drop by your local branch to get started.

5. Get Familiar With Your Built-In Security Features

Gathering your concessions before the lights go down ensures you never have to miss a scene. In that same spirit, exploring your security features ahead of time means your alerts and card controls are ready long before you ever need them.

Take five minutes today to explore these handy features inside Bank of Utah's Online Banking:

  • Security Alerts: Head to Settings → Alerts to choose which notifications you want to receive, like password changes or reset requests.
  • Debit Card Controls (for Personal Accounts): Look for Card Manager inside your Quick Links tile. Practice finding the toggle switch that lets you temporarily turn your card off and back on.
  • Transaction History: Get in the habit of reviewing your checking activity regularly. Compare unfamiliar charges against your receipts or recurring subscriptions.

If your debit card ever goes missing or you suspect fraud, reach out to us even if you have already toggled the card off in the app.

If you ever get stuck finding a setting, just ask a team member for a quick walkthrough. Once you know where everything is, checking in becomes a stress-free part of your routine.

We Are Here to Help

Your checking account holds the money you rely on for groceries, bills and taking care of your family. Any sudden warning about your money deserves careful attention, and you deserve friendly, straightforward help figuring out what is real.

Save our phone number today, ask us about any account features you want to try, and if a strange text ever gives you pause, call us directly before taking action. That way, the next time you sit down with a giant tub of popcorn, you can focus on the big screen with peace of mind.

Frequently Asked Questions

How can I tell if a text from my bank is real?
Verify it independently by calling the phone number on the back of your debit card or visiting your bank's official website. Avoid tapping links or using callback numbers inside the text, and be extra cautious if a message asks for personal codes or passwords.

Will Bank of Utah ever ask for my password or verification code?
No. Bank of Utah team members will never contact you out of the blue asking for passwords, login credentials, card photos or emailed security codes. If someone asks for these details, hang up or stop replying, then call us directly.

What should I do if I clicked a link in a suspicious text?
Close the page immediately. If you entered account info, shared a code or sent funds, call your bank right away using a verified number. If you suspect a malicious download occurred, update your device's security software and run a full system scan.

Where can I manage my Bank of Utah security alerts?
In Online Banking, go to Settings → Alerts to customize your security notifications and confirm your contact details. Feel free to ask a team member if you would like assistance setting this up.

How do I temporarily turn off my Bank of Utah debit card?
For personal accounts, log into Online Banking, open Card Manager from the Quick Links tile, and use the toggle to turn your card off or on. If your card is lost or stolen, be sure to report it directly to the bank as well.

Does my Bank of Utah checking account come with identity theft recovery support?
Yes. Checking account holders and eligible household family members receive Identity Theft Recovery Services powered by NXG Strategies at no additional cost, subject to program terms. No separate sign-up is needed. Simply call 801-409-5000 or visit a branch to begin.

Does identity theft recovery guarantee I will get stolen funds back?
No. The recovery service focuses on restoring your identity, placing credit freezes and working with affected creditors. Recovery of stolen money depends on the circumstances of the fraud. Contact us promptly so we can evaluate your specific situation.

Brian PaniaguaBrian Paniagua brings a strong background in customer service and branch leadership to his work at Bank of Utah. He loves helping others build confidence with their finances and making a meaningful impact in the community. Bilingual in English and Spanish, Brian spends his free time playing and coaching soccer, camping with family, or relaxing with a movie and a giant tub of popcorn — complete with jalapeños (alternating a bite of popcorn with a slice of jalapeño when sharing with his wife, or dumping them straight into the tub when it's all his).