The warning came after a customer with the UK's biggest building society raised concerns that their son had been sent a message.