Fake Bank App Scams
Americans lost $12.5 billion to fraud in 2024, according to the FTC.
Quick Answer
Fake bank app scams trick users into downloading malicious applications that steal their banking credentials, leading to significant financial loss as part of the $2.95 billion lost to imposter scams in 2024 (FTC).
Think you've seen this scam?
Paste any suspicious text, email, or voicemail into our free checker — get a verdict in 5 seconds. Or get our free Scam Defense Playbook.
Free. No credit card. No signup required for the checker.
How It Works
1
Scammers distribute the fake app through phishing text messages, emails, or by placing it in third-party app stores. These messages often create a sense of urgency, claiming there is a problem with your account that requires you to download an update or a new security tool.
2
The fraudulent app is designed to look exactly like a real banking app, using the bank's official logo, colors, and interface. Some malware will instead create a fake login screen that overlays the real banking app, making it nearly impossible to spot.
3
When you enter your username and password into the fake app or overlay screen, the criminals capture your credentials in real-time. The app may also request excessive permissions to read your text messages, allowing them to intercept one-time security codes sent by your bank.
4
Using the stolen credentials and security codes, scammers access your real bank account to transfer money out, make fraudulent purchases, or steal your personal information for identity theft.
Red Flags
- You receive an unsolicited text or email with a link to download or update your banking app.
- The app is listed on a third-party website, not the official Apple App Store or Google Play Store.
- The app has very few downloads, poor reviews, or reviews complaining about suspicious activity.
- The app's developer name does not match the official name of the bank.
- The app's design, logo, or text contains spelling errors, grammatical mistakes, or looks unprofessional.
- The app asks for suspicious or unnecessary permissions, such as access to your contacts or the ability to read all your text messages.
- After installation, the app behaves unusually, causes your phone to slow down, or generates unexpected pop-ups.
What to Do If Targeted
- Immediately uninstall the suspicious app from your device.
- Contact your bank's fraud department right away using the official phone number on their website or the back of your debit card.
- Change your online banking password and PIN immediately using a different, trusted device.
- Review your bank statements for any unauthorized transactions and report them to your bank.
- Place a fraud alert on your credit report with one of the three major credit bureaus (Equifax, Experian, or TransUnion).
- Report the scam to the Federal Trade Commission at reportfraud.ftc.gov and the FBI at ic3.gov.
How to Report It
- FTC — Report the fraud to the Federal Trade Commission to help them investigate and stop scammers.
- FBI IC3 — File a complaint with the FBI's Internet Crime Complaint Center (IC3) for cybercrimes.
- FCC — File a complaint about phone scams, robocalls, or unwanted calls with the Federal Communications Commission.
- AARP Fraud Helpline — Call 877-908-3360 for free support from trained fraud specialists. Available to anyone, not just AARP members.
Key Statistics
- Consumers reported losing $12.5 billion to fraud in 2024, a 25% increase from the previous year. — Federal Trade Commission (FTC) 2025
- Imposter scams, where criminals pretend to be a trusted entity like a bank, were the second-highest fraud category by losses, with victims losing $2.95 billion in 2024. — Federal Trade Commission (FTC) 2025
- The FBI's Internet Crime Complaint Center (IC3) received over 5,100 complaints reporting Account Takeover fraud with losses exceeding $262 million since January 2025. — FBI IC3 2025
- Reports of text message scams impersonating banks increased nearly twentyfold between 2019 and 2022. — Federal Trade Commission (FTC) 2023
- Kaspersky security researchers uncovered almost 200,000 new mobile banking Trojans in 2022, a 100% increase from the previous year. — Kaspersky 2023
Get scam alerts before they hit your parents' inbox
One email per week. The scam that's spreading right now, the red flags, and what to tell Mom and Dad.
Free forever. Unsubscribe in one click.
Frequently Asked Questions
Cybercriminals sometimes exploit loopholes in the app store review process or use deceptive marketing to get their fake apps approved. A fraudulent app might initially appear harmless to pass security checks and then update with malicious features later. Always verify the developer and read recent reviews before downloading.
A fake app is a standalone application that impersonates a real bank's app to steal your credentials when you enter them. Other forms of malware can infect your phone and create a fake login screen that appears on top of your legitimate banking app to capture your information. Both methods have the same goal: to steal your financial data.
Recovering money can be difficult because, from the bank's perspective, the login and transfer were authorized using your credentials. You must contact your bank immediately to report the fraud, as they may be able to stop or reverse the transaction. Reporting the crime to agencies like the FTC and FBI is also a critical step.
Always download apps directly from the link provided on your bank's official website. In the app store, check that the developer's name is the official name of your bank. Be wary of apps with few downloads, negative reviews, or spelling errors in the description.
Has this scam reached your family?
Ready to protect yourself?
We've vetted the tools that actually work — VPN, threat protection, and identity monitoring.
See our recommended tools →Get weekly scam alerts
One breakdown per week. Real threats. Zero fluff.
You're in! Check your inbox.