A tiny deposit can be part of a normal account-linking process. The risky part is an unexpected request to confirm that deposit for someone who contacted you. Scammers can imitate the routine, and sometimes they may even trigger a real test deposit. Here is how to tell the difference and what to do next.

Hands resting beside a laptop and a mug on a sunlit kitchen table, the screen turned away, suggesting a calm moment of checking an account.
An illustrative account activity view with two small test deposits and a reminder to verify them only through the service where the connection began.

What a legitimate micro-deposit looks like

A micro-deposit is a small test transaction, usually less than a dollar, used to check that a bank account is active and that the person linking it can access the account. The amounts are often between one cent and 99 cents, and may arrive as a pair. Depending on the payment method, they can show up within seconds or take a few business days. Timing varies, so a quick deposit or a slower one does not, by itself, prove that a request is genuine.

The key detail is how the process starts. You decide to connect an account on a service’s website or app, enter the requested account information there, and then return to that same service to enter the deposit amounts or a verification code. A general explanation of the process is available in this micro-deposit overview. The specific steps can differ, but legitimate verification happens in the place where you began the connection.

If you just started linking an account and see the expected small deposits, that may be routine. Pause if you did not start the process, or if a person who called, texted, or emailed you asks you to share the amounts elsewhere.

How scammers turn a normal step into a pretext

The small deposit may be real. That does not mean the person asking about it is legitimate. A scammer who has your account and routing numbers may try to connect your account to a payment service, which can cause genuine test deposits to appear. Then the scammer may contact you while pretending to represent your bank, a payment service, or a government agency. They may ask you to read back the amounts to verify your identity or protect your account.

That request changes the purpose of verification. Instead of entering the amounts yourself in the service where you started, you are being asked to hand information to an unsolicited caller or message sender. Scammers may use that information to continue an unauthorized account-linking attempt or pursue other transactions. Knowing a few details about you or your account does not establish that the contact is genuine. Information can be stolen or exposed in many ways.

Other patterns can involve many small transactions. A fraudster may send test deposits to a large set of account numbers to see which accounts appear active, or make small transactions that are easier to overlook before attempting larger unauthorized activity. A run of unfamiliar deposits or withdrawals deserves attention, even if each amount is small. The transaction amount alone is not a safe way to judge whether an account is being misused.

Red flags to notice before you respond

Start with one question: did you initiate an account connection? If the answer is no, treat a message about a micro-deposit as unexpected, even if it includes accurate personal details. Be especially cautious when the sender asks you to confirm exact amounts by phone, text, or email rather than entering them in the service you used.

Other warning signs include pressure to act immediately, a threat that your account will be locked, and links or attachments sent with a verification request you did not expect. Those tactics can push you to respond before you check independently. A caller who sounds professional or already knows some information about you may still be impersonating an organization. The FDIC describes common bank impersonation tactics in its consumer guidance on bank impersonation scams.

Look at your account activity directly, using a way you already trust. Several small deposits or withdrawals close together may be a clue that someone is testing account details. Do not assume that a deposit is harmless simply because it is small, and do not assume it is fraudulent solely because it is unfamiliar. Verify the situation through a channel you choose.

What to do if the request was not yours

If someone contacts you unexpectedly, do not reply with the deposit amounts, click their link, or open an attachment. End the conversation. Then contact the bank or service using a phone number on your card or statement, or open the official app or website yourself. Do not rely on contact details supplied in the message you are checking. Explain that you received an unexpected verification request and ask whether any account-linking activity is pending.

If you see transactions you do not recognize, contact your financial institution promptly and describe the amounts and dates. Ask what steps are available for your account and what information the institution needs from you. Keep copies of texts and emails, note call times and numbers, and record the transactions you noticed. These details may help when the institution reviews the activity. Reporting requirements and possible protections can depend on the circumstances, so ask the institution about your account rather than assuming one deadline or outcome applies to everyone.

You can also report suspected fraud through the FTC’s official reporting channel, and review the FTC’s consumer guidance on spotting and reporting scams. For broader information about bank impersonation, the FDIC resource above is another official source. These resources explain common patterns, but they cannot determine what happened in an individual account. If you are unsure, contact your financial institution through a trusted channel and ask what to do next.

A simple rule for the next verification request

Keep the verification step in the same place where you started it. A legitimate account connection may involve small test deposits, but an unsolicited call or message asking you to read them back is a reason to stop and check. You do not need to settle the question while someone is pressuring you. Take a moment, reach the institution independently, and let it confirm whether the activity is yours. This overview is educational, not personal financial or legal advice.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.