It appears scammers are sending fraudulent Bank of America text messages from card@bofabank.com. Therefore, recipients of messages from bofabank.com are asked to be vigilant, because the domain name or website address is not owned by Bank of America.
A Whois lookup of bofabank.com does not show any association with Bank of America. If you have received a text from bofabank.com, instead of following the instructions in it, contact Bank of America directly to verify.