Left nav Online Threat Alerts (OTA) - Alerting you to scams and frauds. Righ nav

Wells Fargo "Customer Alert" Phishing Text Messages

Wells Fargo Customer Alert Phishing Text Messages

Cybercriminals are sending out fake text messages disguised as "Customer Alert" to Wells Fargo's customers with links to phishing websites. The phishing websites look exactly like Wells Fargo's website and will ask visitors to sign in with their online account credentials. But, any attempts to sign into the fake website by Well Fargo's customers, will result in their account credentials being sent to the cybercriminals behind the scam.

Here are some of the fake Wells Fargo websites that were embedded in the fake text messages that we have received:

  • hxxp://www.wellsfargorestore4237.net
  • hxxp://www.WellsFargoRestore.com
  • hxxp://www.wellsfargorestore4237.net

The fake websites should not be visited.

Once the cybercriminals have received their potential victims' Well Fargo online account credentials, they will use it to gain access to their accounts, steal their money and use the accounts fraudulently.

This is why it is important that Wells Fargo customers never click on or follow a link to sign into their online accounts. They should always go directly to https://www.wellsfargo.com/ and sign-in from their instead. This will protect them against phishing scams. Also, Wells Fargo's customers can protect their accounts using Two Step Authentication / Verification or Two Factor Authentication. This process creates an additional layer of security that helps protect their information and prevent unauthorized transactions. Click here to learn more.

Well Fargo customers who have been tricked by the fake text messages, are asked to contact Wells Fargo immediately for help.

Comment sectionComments or Answers

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location.

Comments 61

May 23, 2020 at 1:39 PM by
Wells Fargo "Customer Alert" Phishing Text Messages
an anonymous user from: El Dorado Hills, California, United States

"hxxp://wffalert1.com New Critical notification"
Received link via text.

Delete

Apr 22, 2020 at 12:32 PM by
Wells Fargo "Customer Alert" Phishing Text Messages
info

"I received a text from 1-410-200-500 states:
frm:wellsfargo-card-suspended-xhoizkbdul
sub:alert for phone NO: (my phone number)
MSG:REF. ID XHOIZKBDUL. To restore go to: hxxp://nmdtsd.com?YM=N5717Z4P9QD

I screen shot it and sent it to Wells Fargo for verification"

Received via email.

Delete

Apr 7, 2020 at 1:25 PM by
Wells Fargo "Customer Alert" Phishing Text Messages
an anonymous user from: Minneapolis, Minnesota, United States

rec'd fake text from wellsy.updateg-ikgh.us.com

Delete

Mar 18, 2020 at 10:22 PM by
Wells Fargo "Customer Alert" Phishing Text Messages
an anonymous user from: Corpus Christi, Texas, United States

I received a "fake" WF account update link via Text on my personal cell which was very upsetting. I did not click the link but called WF immediately to check validity. Of course they sent no such texts and I was told to send them a screenshot at reportphishing-wellsfargo, which then was returned instantly because the system thought it was a "phishing" email. -sigh-

Delete

Nov 21, 2019 at 9:14 PM by
Wells Fargo "Customer Alert" Phishing Text Messages
an anonymous user from: Norfolk, Virginia, United States

I have received two "emails" that show up as text messages to my cell phone and I do not have an account at Wells Fargo as far as I know and the only one that we did have at one time was a line of credit and it was paid off and and the line was closed. I do not know if anyone else has received these two text messages on the same day or not, they are as follows: agwf.ericsmithtransaction-ve (the rest of the email address is cut off could be verizon?) with the message of: (CustomerBankWells)-hxxp://bit.ly2D6Byae which I have no idea what it is for but have not opened it because I don't know if it will install Malware or let a scammer get access to my phone.

The second one is as follows: blockedtransactionwf.fotech99343 message as follows: (WellsBank) http://notification.update.account.suspended929.xn--ihq441h.hk

Once again I did not click on the link as for the same reason above; Malware or scammer?

I have reported this to the FTC as well I will have to check with a local Wells Fargo to see if they know anything about this too. Just wanted to put it out there.

Delete

Nov 21, 2019 at 7:10 PM by
Wells Fargo "Customer Alert" Phishing Text Messages
an anonymous user from: Los Angeles, California, United States

Received Message:

FRM:Wells Fargo Banking
SUBJ:ATM/Debit Card alerts
MSG:Urgently verify the identity of the card
Please verify: hxxp://account-banking-wells.ml

Delete

waiting

CommentsPost Comment or Answer