This is not clear at all. Phishing websites always say (C) Bank of America. That doesn't make it legit.