Skip to main content
Privacy & Security

SiteKey® FAQs

General SiteKey® questions

  • Hide Show What is SiteKey®?

    SiteKey is an image and phrase that you selected when you enrolled in Online Banking. It is used as part of your Online and Mobile Banking sign-in experience. After you enter your Online ID, you are presented with a screen that displays your SiteKey image and phrase and asks for your Passcode.

    Between now and the end of the year, you'll have a new, simplified sign-in in which your Online ID and Passcode will be entered on the same screen. SiteKey will no longer be part of your sign-in experience.

  • Hide Show Why are we making changes to sign-in?

    We know how important security and convenience are to you so we're giving you more tools to manage your security and simplifying the way you sign in to Online and Mobile Banking. You'll soon be able to sign in with one step by entering your Online ID and Passcode on the same screen, and SiteKey will no longer be part of the way you sign in to Online and Mobile Banking.

Simplified sign-in experience

Online and Mobile Banking security tools

Report suspicious activity

  • In your email:
    To report a suspicious email that uses Bank of America's name, forward it to us immediately at mailto:
  • On your statement:
    To report fraudulent activity on your Bank of America account, call 800.432.1000.
  • In texts:
    Smishing” and Smishing are like phishing but sent via SMS text messages to access information. Report attempts at mailto:
  • By phone:
    Vishing” uses the features of Voice over IP (VoIP) phones to steal personal and financial information. Report it at mailto: