The checker reads one suspicious email. Batmail reads your whole inbox overnight.
Paste the Wells Fargo email into the checker and it reads it for the signs below.
The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.
Batmail phishing email checker
A fake Wells Fargo email says your card is paused, then asks you to install a support tool.
Wells Fargo says scammers may cite fraud, illegal activity or an investigation, and may threaten frozen funds or account closure. It also says they often disguise screen sharing as a security step or a verification process. The email below is invented, and each number is one of the signs.
Example
Dear valued customer,
We saw a sign-in from a new device and have paused your debit card.
Install our support tool from the link below so an agent can check your account with you.
When the agent calls, read out the one-time code we text you.
The button says wellsfargo.com/support
The sender's address never says wellsfargo.com.
The name says Wells Fargo, but the domain after the @ belongs to someone else. Wells Fargo says legitimate Wells Fargo emails will include wellsfargo.com in the address.
A claim of a new sign-in and a paused card.
Wells Fargo says scammers may cite fraud or an investigation, and threaten frozen funds or account closure.
A support tool to install.
Wells Fargo says it will never ask you to download this type of software or to screen share with it. It names AnyDesk, TeamViewer, QuickSupport and Zoom.
A request to read out a one-time code.
Wells Fargo says that if you get a one-time code for a transaction you did not start, don't use the code or share it with anyone, even if they claim to be from your bank.
A button that says wellsfargo.com and goes somewhere else.
Wells Fargo says to hover over links before clicking, and to avoid numbers or links you don't recognize.
From Wells Fargo: Tips to Avoid Bank Imposter Scams, read 7 November 2026.
From Wells Fargo: How to Spot, Avoid, and Report Phishing Scams, read 7 November 2026.
Read the sender's address from the right, because the last two parts say who owns it.
Anyone can put “Wells Fargo” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Wells Fargo’s fraud pages are at www.wellsfargo.com, and the owner of that address is wellsfargo.com.
Read the domain from the right
www.wellsfargo.com
From Wells FargoOwned by wellsfargo.com. This is the address of Wells Fargo's own fraud pages, and the bank says its real emails include wellsfargo.com in the address.
wellsfargo.com.support-tool.example
Not from Wells FargoOwned by support-tool.example. wellsfargo.com is only a label in front of it.
wellsfargo-account-desk.example
Not from Wells FargoOwned by wellsfargo-account-desk.example. The name has Wells Fargo in it, but the address never says wellsfargo.com.
From Wells Fargo: Tips to Avoid Bank Imposter Scams, read 7 November 2026.
Wells Fargo says it will never ask you to move money, share your screen or rush you.
Wells Fargo’s page on bank imposter scams lists what it says it will never do. A fake security alert breaks at least one of these rules.
| Question | What Wells Fargo says | What a fake Wells Fargo email does |
|---|---|---|
| Will it ask me to move money? | What Wells Fargo saysWells Fargo says it will never ask you to move or send money to anyone, including yourself. That covers requests framed as refunds, reversals or protecting your money. | What a fake Wells Fargo email doesTells you to move your balance to a "safe" place. |
| Will it ask me to install software or share my screen? | What Wells Fargo saysWells Fargo says it will never ask you to download this type of software or to screen share with it. | What a fake Wells Fargo email doesAsks you to install a "support tool" so an agent can look at your account. |
| Will it ask for my password or a one-time code? | What Wells Fargo saysWells Fargo says its employees will not initiate contact and ask for your password. For a one-time code you did not ask for, it says not to use or share it. | What a fake Wells Fargo email doesAsks you to read out the code it texts you. |
| Will it rush me? | What Wells Fargo saysWells Fargo says legitimate organizations like it will never rush you or prevent you from ending a call. | What a fake Wells Fargo email doesA short deadline, or repeated calls. |
From Wells Fargo: Tips to Avoid Bank Imposter Scams, read 7 November 2026.
From Wells Fargo: How to Spot, Avoid, and Report Phishing Scams, read 7 November 2026.
A bank imposter call follows a pattern, and ending the call breaks it.
Wells Fargo names three kinds of fake message: phishing is a fake email, smishing is a fake text and vishing is a fake phone call. The example email above points to the third kind, because it ends with an agent who will call. Wells Fargo says vishing attempts often come outside normal business hours and may involve repeated calls to create urgency.
How a bank imposter call runs
- The call
Caller ID says Wells Fargo.
Wells Fargo says scammers can spoof phone numbers, so don't rely on caller ID.
- The story
Fraud, a crime or an investigation.
Wells Fargo says they may threaten frozen funds or account closure, and may use AI generated or altered voices.
- The ask
Move money, share your screen, read a code.
Wells Fargo says scammers often disguise screen sharing as a security step.
- Your move
End the call and call your own number.
Wells Fargo says to call the number on the back of your card.
From Wells Fargo: Tips to Avoid Bank Imposter Scams, read 7 November 2026.
From Wells Fargo: How to Spot, Avoid, and Report Phishing Scams, read 7 November 2026.
Five steps tell you whether a Wells Fargo email is real without clicking anything.
- Leave the button and every link alone. Wells Fargo says not to click links, scan QR codes or open attachments from unknown senders.
- Read the sender’s address from the right, as in the picture above. Wells Fargo says legitimate emails include wellsfargo.com in the address, and to hover over links before clicking.
- Never install software, share your screen or read out a code. If a call feels wrong, Wells Fargo says to end the call immediately and call the number on the back of your card.
- Paste the email into the checker at the top of this page for a second read.
- If you did not respond, forward the message to reportphish@wellsfargo.com. Wells Fargo warns that some forwarded messages may be rejected, and says to delete the email or text if that happens. In Gmail you can also choose More next to Reply, then Report phishing.
Steps from Wells Fargo: How to Spot, Avoid, and Report Phishing Scams, read 7 November 2026.
Steps from Gmail Help: Avoid & report phishing emails, read 7 November 2026.
If you clicked or shared account details, Wells Fargo says to call it right away.
Wells Fargo gives two numbers on two pages. Its phishing page says that if you clicked a suspicious link or shared information tied to your Wells Fargo account, you should call 1-866-867-5568. Its bank imposter page says that if you sent a payment to, or shared personal account information with, someone claiming to be from Wells Fargo, you should call 1-800-869-3557 immediately.
What to do depends on what you did
You only read it.
Forward it to reportphish@wellsfargo.com and then delete it. If the forward is rejected, delete it.
You clicked, or shared information tied to your account.
Call 1-866-867-5568, the number on Wells Fargo's phishing page. If something may have downloaded, update your security software and run a scan.
You sent a payment, or shared account details with a caller.
Call 1-800-869-3557 immediately, the number on Wells Fargo’s bank imposter page. Then follow the steps at IdentityTheft.gov for what you shared.
From Wells Fargo: How to Spot, Avoid, and Report Phishing Scams, read 7 November 2026.
From Wells Fargo: Tips to Avoid Bank Imposter Scams, read 7 November 2026.
From FTC Consumer Advice: What To Do if You Were Scammed, read 7 November 2026.
From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 7 November 2026.
The same checks work on other bank emails.
A security alert can borrow the name of any bank. The guide to fake Chase emails covers a fraud alert that asks you to move money, and the guide to fake Bank of America emails covers an email that tells you not to call. The holiday scam emails guide puts the kinds side by side.
These are the questions people ask next.
How can I tell a real Wells Fargo email from a fake one?
Wells Fargo says legitimate Wells Fargo emails will include wellsfargo.com in the address. It says to hover over links before clicking, to avoid numbers or links you do not recognize, and not to click links, scan QR codes or open attachments from unknown senders.
Will Wells Fargo ever ask me to move money?
No. Wells Fargo says it will never ask you to move or send money to anyone, including yourself, and that this covers requests framed as refunds, reversals or protecting your money. It says never to wire money, send money with Zelle or a Venmo payment, or withdraw cash at the direction of a bank employee.
Will Wells Fargo ask me to install software or share my screen?
No. Wells Fargo says it will never ask you to download that type of software or to screen share with them, and names AnyDesk, TeamViewer, QuickSupport and Zoom as examples. It says scammers often disguise screen sharing as a security step or a verification process.
Where do I report a fake Wells Fargo email or text?
If you did not respond, Wells Fargo says to forward the message to reportphish@wellsfargo.com. It warns that some forwarded messages may be rejected by its server, and says to delete the suspicious email or text if that happens. In Gmail you can also open the message, choose More next to Reply, then Report phishing.
What if the caller ID says Wells Fargo?
Wells Fargo says scammers can spoof phone numbers to show Wells Fargo on your caller ID, and that you should not rely on caller ID. It says to end the call immediately and contact the bank by calling the number on the back of your card.
What should I do if I clicked or shared information?
If you clicked a suspicious link or shared information tied to your Wells Fargo account, its phishing page says to call 1-866-867-5568. If you sent a payment to, or shared account information with, someone claiming to be from Wells Fargo, its bank imposter page says to call 1-800-869-3557 immediately.
Every step on this page comes from these official pages.
Read on . Spot a step that has changed? Email support@batmail.ai and we will fix it.