Batmail

Guide: Scam emails

A U.S. Bank email that asks you to click a link and re-enter your password is fake, and Batmail's checker reads it.

Published: 9 November 2026

Last updated: 9 November 2026

U.S. Bank says it never sends emails asking you to click a link to verify yourself, and doesn’t ask you to verify your Social Security number, account number, PIN or password by email. So an email that blocks your account until you re-enter your password is fake. Paste it into Batmail’s checker below, or use the signs on this page.

The checker reads one suspicious email. Batmail reads your whole inbox overnight.

Paste the U.S. Bank email into the checker and it reads it for the signs below.

The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.

Batmail phishing email checker

Include the sender address and subject if you have them. Never paste a password or a one-time code, and do not open attachments to copy them.

A fake U.S. Bank email says a block was placed on your account and asks you to re-enter your password.

U.S. Bank’s page on telling if an email is phishing lists four things these emails have in common and gives an example of its own. The email below is invented, and each number is one of the signs.

From U.S. Bank: How do I tell if an email is phishing or fraudulent?, read 9 November 2026.

From U.S. Bank: How do I report fraud, phishing, identity theft or questionable emails?, read 9 November 2026.

Read the sender's address from the right, because the last two parts say who owns it.

Anyone can put “U.S. Bank” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. U.S. Bank’s pages on phishing and fraud are at www.usbank.com, and the owner of that address is usbank.com. U.S. Bank says phishing emails can look very official, so you should check the email and the sender’s address carefully.

From U.S. Bank: How to report a scam, read 9 November 2026.

U.S. Bank says it never emails a link to verify yourself and never asks for sensitive details by email.

U.S. Bank’s help pages give short rules for what it will not do and what phishing emails share. A fake account block breaks at least one of them.

Five questions to ask of a message that says it is from U.S. Bank, what U.S. Bank says about each, and what a fake account block does.
QuestionWhat U.S. Bank saysWhat a fake account block does
Will U.S. Bank email me a link to verify myself?What U.S. Bank saysU.S. Bank says it never sends emails asking you to click a link to verify yourself, and never sends an email or text asking for personal or account information.What a fake account block doesSays to click to reactivate your account.
Will U.S. Bank ask me to verify my SSN, account number, PIN or password by email?What U.S. Bank saysU.S. Bank says it doesn't ask you to verify sensitive information by email, including Social Security numbers, account numbers, PINs and passwords.What a fake account block doesAsks you to re-enter your password and confirm your Social Security number.
Will it try to scare me?What U.S. Bank saysU.S. Bank says phishing emails attempt to trick or scare you into providing personal information and use names of specific companies or government agencies to appear authentic.What a fake account block doesSays a block has been placed on your account.
Will it give me a reason to click?What U.S. Bank saysU.S. Bank says phishing emails give seemingly valid reasons as to why you should select a link.What a fake account block doesSays to click here to reactivate.
Will it have mistakes?What U.S. Bank saysU.S. Bank says phishing emails may contain spelling or grammatical errors, and can also look very official, so check the sender's address and look for odd symbols, unusual language or amateur logos.What a fake account block doesMisspells a word in the middle of a bank notice.

From U.S. Bank: How do I tell if an email is phishing or fraudulent?, read 9 November 2026.

From U.S. Bank: How do I report fraud, phishing, identity theft or questionable emails?, read 9 November 2026.

From U.S. Bank: How to report a scam, read 9 November 2026.

U.S. Bank says to call its Fraud Department at 877-595-6256 if you are unsure about an email or text.

U.S. Bank gives a phone number for a suspicious email and text. The U.S. Bank pages we read name no address for forwarding an email, so the number is the route it gives.

From U.S. Bank: How do I report fraud, phishing, identity theft or questionable emails?, read 9 November 2026.

From U.S. Bank: How to report a scam, read 9 November 2026.

Five steps tell you whether a U.S. Bank email is real without clicking anything.

  1. Leave the button and every link alone. U.S. Bank says it never sends emails asking you to click a link to verify yourself.
  2. Read the sender’s actual address from the right, as in the picture above, and look for odd symbols, unusual language or amateur logos.
  3. Check your account by opening U.S. Bank’s app or site yourself. The FTC says to contact a company using a phone number or website you know is real, not the information in the email.
  4. Paste the email into the checker at the top of this page for a second read.
  5. Call U.S. Bank’s Fraud Department at 877-595-6256 if you are unsure. The FTC says to forward a phishing email to reportphishing@apwg.org. In Gmail you can also choose More next to Reply, then Report phishing.

Steps from U.S. Bank: How do I tell if an email is phishing or fraudulent?, read 9 November 2026.

Steps from FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.

Steps from Gmail Help: Avoid & report phishing emails, read 9 November 2026.

If you clicked or gave details, U.S. Bank says to call its Fraud Department right away.

U.S. Bank says to call its Fraud Department at 877-595-6256 right away if you have clicked on a link within, or provided account or personal information in response to, a suspicious email or text. Its article on reporting a scam says notifying your bank should always be your first move, and that you can also report a scam to the FTC, the FBI’s Internet Crime Complaint Center and your local police.

From U.S. Bank: How do I report fraud, phishing, identity theft or questionable emails?, read 9 November 2026.

From U.S. Bank: How to report a scam, read 9 November 2026.

From FTC Consumer Advice: What To Do if You Were Scammed, read 9 November 2026.

From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.

The same checks work on other bank emails.

An account block can borrow the name of any bank. The guide to fake Citi emails covers a threatening tone, the guide to fake Wells Fargo emails covers a request to install a support tool, and the guide to fake Bank of America emails covers a message that tells you not to call. The holiday scam emails guide puts the kinds side by side.

These are the questions people ask next.

How can I tell a real U.S. Bank email from a fake one?

U.S. Bank says phishing or fraudulent emails have these things in common: they use names of specific companies or government agencies to appear authentic, try to trick or scare you into providing personal information, give seemingly valid reasons why you should select a link, and may contain spelling or grammatical errors. The U.S. Bank pages we read do not list the addresses it sends from.

What does U.S. Bank say it never does?

U.S. Bank says it never sends emails asking you to click a link to verify yourself, and doesn't ask you to verify sensitive information by email, including Social Security numbers, account numbers, PINs and passwords. It also says it will never send an email or text that asks for personal or account information.

What does a fake U.S. Bank email say?

U.S. Bank gives this example of a phishing email: "Suspicious activity was found on your account and a block has been placed on it. To reactivate your account, click here and re-enter your username and password."

Who do I call about a suspicious U.S. Bank email?

U.S. Bank says to call its Fraud Department at 877-595-6256 (it accepts relay calls) if you've received an email or text and you're unsure if it's from U.S. Bank. The current U.S. Bank pages we read name that phone number and no address for forwarding an email. In Gmail you can also choose More next to Reply, then Report phishing.

What if I clicked or gave my details?

U.S. Bank says to call its Fraud Department at 877-595-6256 right away if you've clicked on a link within, or provided account or personal information in response to, a suspicious email or text. Its article on reporting a scam says notifying your bank should always be your first move, and that you can also report a scam to the FTC, the FBI's Internet Crime Complaint Center and your local police.

Can a phishing email look official?

Yes. U.S. Bank says phishing emails can look very official, so you should check the email and the sender's address carefully, and look for odd symbols, unusual language or amateur logos.

Every step on this page comes from these official pages.

A rule in plain English can send emails like this to spam while you sleep.

Batmail reads every email that lands overnight and runs the rules you wrote in plain English. A rule such as “looks like a scam” can send a message to spam, and Batmail writes down the reason for each action. Scout is free on one inbox, no card required.