Bank verification request — what it means and what to do next

Verification requests are common. This page shows the safest route, common verification types, and clear scam signals.

Unusual activity Account restricted Scam or not Payment failed

What to do now (safe route)

Rule: Complete verification only inside the banking app or on the official website you opened manually. Never upload documents or enter codes via a link from an email/SMS.
  • Step 1: Open your bank app from the app icon (not from the message)
  • Step 2: Check if the verification request is visible inside the app
  • Step 3: If it’s in-app, follow the verification steps shown there
  • Step 4: If you don’t see it in-app, treat the message as suspicious — contact the bank using the number on your card or official website
If anything asks you to reply with ID photos, share OTP codes, scan a QR code to “verify”, or install remote access tools — stop and use how to spot a scam message →

Common verification types (and what they imply)

  • OTP / code confirmation (SCA): usually instant, tied to login or a specific action
  • Transaction confirmation: approve/deny a specific payment or transfer
  • KYC document upload: ID documents uploaded inside the app; review can take time
  • Selfie / video check: identity proof; may require manual review
  • Contact/address update: confirm phone/email/address changes to prevent takeover

What this usually means

A bank verification request means the bank needs to confirm identity, account details, or a specific action. Common triggers include unusual activity, a new device/login, profile changes, or repeated declines/failures.

Signals → likely meaning

Practical diagnosis (not generic advice):

  • “Upload documents inside the app” → usually legitimate (KYC flow) if shown in-app
  • “Reply to this email with a passport/ID photo” → high risk (common scam pattern)
  • Asked for full card number / PIN / password → high risk (scam)
  • Banks do not ask you to share OTP/SMS codes with anyone → if someone asks for a code, assume scam
  • QR code to “verify” or “restore access” → high risk (common scam pattern)
  • Asked to install AnyDesk/TeamViewer or share your screen → high risk (account takeover pattern)
  • Verification appears right after login from a new device → normal security trigger
  • “Complete verification to restore access” → could be legitimate, but confirm it exists in-app first

Timeline (varies by type)

  • Instant: OTP/code confirmations and transaction approvals
  • Hours–days: document/selfie reviews (can be longer depending on bank and workload)
  • Until completed: some features may stay limited while verification is pending

Risk level (contextual)

Low

Low if verification is clearly visible in-app and follows a normal flow.

  • In-app upload/confirm steps
  • No pressure tactics or credential requests
Medium

Medium if account features are limited until verification is done.

  • Login friction, transfers disabled, new beneficiaries blocked
  • Limits lowered or cards temporarily restricted
High

High if the message tries to collect credentials/documents through the message itself, or pushes you to act outside the app.

  • “Reply with ID photo” / “send documents here”
  • Requests for password, PIN, full card details, or OTP codes
  • Pressure tactics + threats, or the domain does not exactly match the bank’s official domain
If verification is ignored or fails, the next step is often account restricted.

Common questions

Does a bank verification request mean my account is restricted?

Not necessarily. Verification is often preventive. Restrictions typically happen only if verification is ignored, fails, or risk escalates.

Is it safe to upload ID documents for verification?

It can be safe if the upload happens inside the official banking app or official website opened manually. It’s high risk if you’re asked to email ID photos, send documents in chat, or upload via a message link.

Can a bank ask for OTP/SMS codes to secure or cancel something?

Banks do not ask you to share OTP/SMS codes with anyone. If someone asks for a code to “secure” or “cancel” something, assume scam.

What if I don’t see the verification request inside my banking app?

Treat the message as suspicious. Don’t send documents or codes. Verify by opening the app from the icon or contacting the bank using the number on your card or official website.

How long does bank verification take?

It varies by bank and type. Some checks are instant; document/selfie reviews can take hours to days and sometimes longer.

Related banking messages

Unusual activity detected
Account restricted
Payment failed

Related security concepts

Official guidance:
FTC — Phishing and scam messages
NCSC — Phishing and scams

ClearExplained — simple pages that remove panic and reduce mistakes.