Got a text asking you to “confirm a transfer”? Here's how to spot the scam
I'm Doña Caja, and in all my years behind the counter I've seen it all. One rule has always protected me: when someone sends you money, it simply arrives. If you're asked to open a link to receive it, it's a trap.
Doña CajaYears of counting money.
Updated
Receiving money never requires a link
The scam works like this: you get a text or a message saying someone sent you a transfer and you need to “confirm” or “activate” it through a link. The link opens a page that looks like your bank's and asks for your username, password or the code sent to your phone. With that, they get into your account.
In Colombia, Bogotá's city government issued an alert about fake text messages posing as payments through the country's new instant transfer system, to steal banking details. But the trick isn't limited to one country or one app: swap in the name of any bank or digital wallet and the trap is the same.
The three warning signs that keep showing up
They rush you. “You have 24 hours,” “your account will be locked,” “final notice.” The urgency is there so you don't stop to think or ask anyone.
They ask for passwords or codes. Your bank won't ask for your password or the code it texts you, whether by message or by phone. That code is the key to your account: never share it, even if the person claims to speak for the bank.
They promise a lot, very easily. “Double your money in a week,” “you won a prize,” “guaranteed returns.” That isn't an opportunity; it's the bait.
What to do before you tap any link
Check for the payment in your bank or wallet app by opening it yourself, never from the message. If the money isn't there, it doesn't exist. If you're unsure, call the number on the back of your card or on the bank's official website, not the one in the message.
Watch the details: senders with odd numbers, spelling mistakes, shortened links or addresses with swapped letters. And if someone writes asking you to return money they “sent by mistake,” check your account first, because that's another well-known trick.
If you already clicked or shared something
Don't stay quiet out of embarrassment: this happens to very careful people. Contact your bank through its official channels right away to freeze your account or card, change your passwords and review your recent transactions. The faster you act, the more options you have.
This is where tracking your spending really helps. If you log what you spend, in Oslo for example, anything you don't recognize stands out the same day you check your bank statement, not at the end of the month. And tell your family, especially anyone less used to paying by phone: sharing these signs is the best protection.
Frequently asked questions
How can I tell if a money transfer text is fake?
Be suspicious if it asks you to open a link to confirm, activate or receive a payment, rushes you with deadlines or account locks, or asks for passwords or codes. Receiving money doesn't require any action from you. Check by opening your bank or wallet app yourself: if the payment isn't there, the message is fake.
What should I do if I clicked the link or gave my details?
Act fast and without shame. Call your bank through its official channels to freeze your account or card, change your passwords and review recent transactions. If you shared a verification code, say so right away. Then report the case to the authorities in your country and warn your family so they don't fall for the same thing.
Can my bank ask for my password or code by text message?
No. Your bank won't ask for your password, your PIN or the verification code it texts you, whether by message, phone call or email. If someone asks for them, even using your bank's name or logo, it's a scam. Don't reply, hang up and contact the bank yourself using its official number.
Sources (in Spanish)
This is financial education, not advice: Oslo doesn't recommend loans or investments. Decisions about your money are yours.


