Bank Fraud Department Call Scam: How Fake Bank Calls Work

The bank fraud department call scam turns your instinct to protect your money against you. The caller says there is suspicious activity on your account, the caller ID shows your bank's real number, and they already know your name and perhaps the last digits of your card. Everything they ask you to do is framed as keeping you safe. This guide explains how these calls work, what a genuine bank will never ask, and how to check in a way scammers cannot intercept.

How the bank fraud department call scam works

Most versions follow the same steps. First comes a hook: a text about a suspicious payment, or a call saying a large transaction has been flagged. Then comes credibility: personal details taken from data breaches, phishing pages or fake delivery texts, and a caller ID that matches your bank. Finally there is the ask, which is always something that only you can do, because the scammer cannot do it without you.

Spoofed bank numbers

Caller ID can be faked. A scammer can make your phone display the number printed on the back of your card, and some phones will even show your bank's name because the number is saved in your contacts. In the UK, networks block many spoofed calls using a Do Not Originate list of numbers that banks and government bodies only use for inbound calls, but no system catches everything. A matching number is not proof that your bank is calling.

One-time code theft

The caller says they will send a code to verify your identity, or to cancel a fraudulent payment, and asks you to read it back. In reality, the scammer is signing in to your online banking, approving a payment or adding your card to their own phone's digital wallet, and the code is the last thing standing in the way. Read the whole text: genuine codes often say what they are for and tell you never to share them.

The safe account scam

You are told your account has been compromised, perhaps by an insider at the bank, and that you must move your money to a new safe account set up for you. The account belongs to the scammer. Because you make the transfer yourself, this is an authorised payment, which can be much harder to recover than a payment taken without your knowledge. No genuine bank will ever ask you to move money to keep it safe.

Other variations

• The courier scam: you are asked to hand your card and PIN to a courier who will take it for investigation.
• The remote-access scam: you are asked to install an app so the fraud team can secure your device.
• The send-it-to-yourself scam: you are told to send money to your own name through a payment app, but the account details belong to the scammer.
• The police or regulator call: someone posing as a police officer or financial regulator asks you to help an investigation by withdrawing cash or buying gold.

Why the scam often starts with a text

Many fake fraud calls are preceded by a text asking whether you made a payment, with an instruction to reply YES or NO. Replying confirms your number is active, and a call follows minutes later from someone who says they are following up your reply. Because the call matches a message you just answered, it feels like a genuine bank process. Treat both the text and the call as unverified, and check through your banking app instead.

What your real bank will never ask

• Your full PIN, online banking password or full security answers.
• A one-time passcode sent to your phone, read back over the phone.
• To move money to a safe, holding or new account.
• To hand your card to a courier or someone at your door.
• To install remote-access or screen-sharing software.
• To lie to bank staff about why you are making a payment.
• To keep the call secret from family or from staff at your branch.

Being told what to say if your bank asks about a payment is one of the strongest signs of a scam. A real fraud team wants you to tell the bank everything.

How to check whether the call is really your bank

1. 1Tell the caller you will call the bank back, then hang up. A genuine fraud team will expect that.
2. 2Call the number on the back of your card or in your banking app, not a number the caller gave you, and not the number that appeared on your screen.
3. 3If you can, use a different phone. If you must use a landline, wait several minutes or call someone you know first, so you are sure the previous call has ended.
4. 4Check the app. Genuine fraud alerts usually show up in your banking app or let you confirm or reject a payment there.
5. 5If you want to know more about the number that called, a free lookup on WhoCallsMe can show its line type and any spam reports, but remember that spoofed calls can display a bank's real number.

159 in the UK

In the UK, you can dial 159 from most mobile and landline networks to be connected securely to your bank's official phone line. The service is run by Stop Scams UK, and most major high-street and app-based banks take part. It is designed for exactly this moment: you have had an unexpected call or message about your money and you want to reach your bank without looking up a number. If your bank does not appear in the 159 menu, use the number on the back of your card.

If you shared a code or moved money

1. 1Call your bank immediately on the number from your card or app, and say clearly that you have been the victim of a fraud. Speed matters, because banks can sometimes stop or recall payments.
2. 2Ask the bank to freeze your cards and online banking access while they investigate.
3. 3Change your online banking password and any other passwords you shared, and remove any remote-access apps.
4. 4Report the scam. In the US, use ReportFraud.ftc.gov and the FBI's IC3. In England, Wales and Northern Ireland, report to Report Fraud on 0300 123 2040; in Scotland, call Police Scotland on 101. In Canada, contact the Canadian Anti-Fraud Centre, and in Australia, Scamwatch and ReportCyber.
5. 5Keep notes: times, numbers, names used and anything the caller asked you to do.

Will you get your money back?

It depends on where you are and how the money left. In the UK, payment firms have been required since 7 October 2024 to reimburse most victims of authorised push payment scams made by Faster Payments or CHAPS, up to £85,000 per claim, with limited exceptions such as gross negligence. In the US, Regulation E gives strong protection for unauthorised electronic transfers that you report promptly, but payments you were tricked into making yourself are often treated differently, so report straight away and ask your bank to explain your options. Elsewhere, rules vary, but faster reporting always improves the odds.

The rule that beats every version

Your bank can start a conversation, but you should always finish it on a line you dialled yourself. If a caller wants a code, a transfer, your card or access to your device, hang up and call the number on your card. A real fraud team will still be there; a scammer will not.