Scam Alert
If you get a text, app alert, or email saying your bank card was added to Apple Pay, Google Wallet, or another digital wallet when you did not do it, take it seriously but stay calm. This warning can be part of a scam where criminals already have some of your card details and try to trick you into sharing a one-time passcode.
The good news is that there is a clear way to respond. This guide explains what the alert usually means, what to do right away, and how to protect your money without rushing or panicking.
The simple version: if you did not request it, do not share the code, do not tap message links, and do not trust an incoming caller who says they are helping. Contact your bank using the official app, the number on the back of your card, or 159 if the issue comes through a suspicious call.
What this warning usually means
A digital wallet lets a bank card be used from a phone or watch. If a criminal gets enough information about your card, they may try to add it to a wallet on their device. Your bank may then send a real verification text or app prompt with a one-time passcode.
That genuine code is the part criminals want. They may ring you while the message arrives, pretend to be from the bank, and say the code is needed to stop fraud. It is not. If they triggered the code, giving it to them can help them finish adding your card.
Important: a real text from your bank can still arrive during a scam. The message may be genuine, but the person asking you to read it out may not be.
Signs this could be digital-wallet fraud
- You receive a one-time passcode you did not request.
- You get a message saying your card was added to a new device.
- You notice payments you do not recognise.
- You receive an unexpected call claiming to be from your bank just as the message arrives.
- You are told to hurry, confirm a code, or “cancel” something by reading information back.
UK anti-fraud guidance now highlights this pattern clearly. Take Five warns that criminals can steal card details, trick people into sharing an onetime passcode, and then add the card to a digital wallet on their own phone.
What to do straight away
- Do not share the one-time passcode. Treat it as carefully as your PIN.
- Do not tap links in the message. Open your banking app or website the normal way instead.
- End any suspicious call. If somebody is already on the phone, hang up.
- Contact your bank yourself. Use the official app, the number on the back of your card, or 159 if the issue involved a suspicious bank call.
- Ask the bank to check whether your card has been added to a wallet and whether the card needs to be frozen or replaced.
If the problem started with a call claiming to be from your bank, our guide on how to check if a bank or broadband support call is real is a useful follow-on read.
Why 159 can help
In the UK, 159 is a short number designed to connect you safely to your bank when a financial call feels suspicious. Stop Scams UK says it works like other trusted short numbers such as 101 or 111, and that 159 will never call you.
That matters because fraudsters often want to keep you on the line and stop you checking properly. Hanging up and calling back through a trusted route breaks that pressure.
Useful habit: if somebody says they are from your bank and asks about a code, stop the call and ring back using 159 or a number you already trust.
If you already shared the code
Act quickly, but do not blame yourself. These scams are designed to sound convincing.
- Call your bank immediately. Tell them you shared a code linked to a possible wallet-add scam.
- Ask them to freeze the card or block the digital-wallet token if needed.
- Check recent transactions and report anything you do not recognise.
- Watch for further messages or calls. After one attempt, criminals may try again in a different way.
- Report the scam. If money was taken or you were tricked on a call, report it through Report Fraud.
If you also tapped a link in a text before realising something was wrong, see our guide on what to do after tapping a suspicious link on your phone.
What to do with the message itself
If the alert came by text and you think it is part of a scam, the National Cyber Security Centre says most UK phone providers let you forward suspicious texts to 7726 for free. That helps providers investigate and block malicious senders.
- Forward suspicious texts to 7726.
- Do not continue chatting with the sender.
- Keep a screenshot if you may need it for your bank or a fraud report.
The NCSC also says reporting scam texts helps reduce the number of scam messages you receive and helps protect other people.
Simple checks that make this scam harder
- Turn on transaction alerts in your banking app if your bank offers them.
- Review your statements regularly for small or unusual payments.
- Keep card details private and be wary of entering them after following a message link.
- Use strong device security such as a screen lock, fingerprint, or face unlock.
- Pause when a code arrives unexpectedly. A code you did not request is a reason to stop, not to obey the person on the phone.
If you want a wider check-up, our guide on making online banking on your phone or tablet safer covers a few good habits that reduce day-to-day risk.
A calm rule worth remembering
A one-time passcode is for you to use in a process you started. If a code arrives out of the blue, or while somebody is pressuring you on the phone, the safest assumption is that something is wrong.
You do not have to solve it in that moment. You only need to stop, avoid sharing the code, and contact your bank through a route you already trust.
When patient support can help
Scams like this are upsetting because the alerts often look real. Many people are left unsure whether the card is safe, whether the text was genuine, or whether it is still safe to use their phone for banking.
Simply Tech Support helps independent clients and families with scam checks, safer phone and banking habits, suspicious messages, and practical one-to-one support at home. You can read more on the Simply Tech Support services page.
