Impersonation, AI & Phishing · Global
Bank Impersonation Scams
“We’ve spotted suspicious activity on your account.” It sounds like your bank protecting you — but it ends with you handing your money to a scammer. Here’s how to see it coming.
Updated Aug 2026 · 6 min read
Call · “Your Bank — Fraud Team”
“Suspicious activity detected. To protect your funds, move them to a safe account now.”
It’s the scam that turns your own caution against you. Someone claiming to be your bank’s fraud team calls or texts to say your account is under attack — then, in the name of “protecting” you, walks you into moving your savings straight to them.
It works so well that in Australia it has become the number-one scam by reports and losses, and it’s among the costliest worldwide (in the UK it’s a leading form of “authorised push payment” fraud). The good news: one simple habit defeats every version of it.
The one fact that ends this scam
Your real bank will never ask you to move money to a “safe account”, read out a one-time code or PIN, or install software to “protect” your account.
If anyone asks you to do any of these — no matter how official they sound — it’s a scam. Hang up and call your bank on the number printed on your card.
How the Scam Works
The alarm
You get a call, text, or email that looks like it’s from your bank: “We’ve detected suspicious activity / an unauthorised transaction on your account.” The message is designed to make your heart race.
The “fraud officer”
A calm, professional “fraud team” member takes over. They already seem to know your name and some details, and their number may show your bank’s real name on caller ID — so it feels genuine.
The trust play
They warn you not to trust anyone else — even other bank staff — and tell you to keep the call going and stay quiet. Sometimes it starts with a “Did you make this $X payment? Reply YES/NO” text, and replying triggers the call.
The “safe account”
To “protect” your money, they tell you to move it to a new “safe account” (theirs), or to read out a one-time code, or to install software so they can “secure” it. The moment you do, the money is gone.
Why It’s So Convincing
- Caller ID is spoofed to show your bank’s real name and phone number — it proves nothing.
- They know fragments of your details (name, last digits of a card) from data leaks, which makes them sound official.
- They manufacture urgency and secrecy: act now, don’t hang up, don’t tell the branch.
- The “safe account” framing flips the script — it feels like they’re helping you, not robbing you.
The Warning Signs
- Any contact about “suspicious activity” that asks you to act immediately.
- Being told to move or transfer your money to a “safe”, “holding”, or “new” account.
- A request to read out a one-time code, OTP, PIN, or full card number.
- Being asked to install a “security” or remote-access app so they can “protect” your account.
- Pressure to stay on the line, keep it secret, or not trust other bank staff.
Got a call or text you’re unsure about?
Check it against the signs of a scam call — and learn why caller ID can’t be trusted and how to verify who’s really contacting you.
Open the Phone Number Scam Checker →How to Protect Yourself
- Hang up. Then call your bank back on the number printed on your card or in its official app — never a number the caller gave you.
- Never move money to a “safe account”. No genuine bank will ever ask you to.
- Never read out a one-time code, OTP, PIN, or full card number — your bank already knows these and will never ask.
- Don’t install any “security” or remote-access app because someone on a call told you to.
- Ignore the pressure. Real fraud teams are happy for you to hang up, take your time, and call back.
Can You Get Your Money Back?
Honest answer: it depends almost entirely on how you paid and how fast you act. Speed is everything — report within hours, not days.
- Credit cardOften
You can dispute the charge (a “chargeback”) through your card network. The strongest protection of any payment type.
- Bank transfer, UPI or debit cardSometimes — if you’re fast
Report within hours so the bank can try to freeze the receiving account before the money is moved on. In India, call 1930 or file at cybercrime.gov.in immediately.
- Payment apps (Zelle, Venmo, Cash App, PayPal)Varies
Often treated like cash. PayPal “Goods & Services” has buyer protection; “friends & family” and most instant transfers usually don’t. Report to the app and your bank.
- Gift cardsRare
Contact the card issuer immediately — occasionally they can freeze an unredeemed balance. After that, it’s almost always gone.
- CryptocurrencyHardest — usually not
Crypto transfers are irreversible and cross-border. Recovery is rare, but act fast: report the transaction (with the wallet address and transaction hash) to the exchange involved and to law enforcement. If the funds land in a regulated exchange, it can sometimes freeze them.
What Actually Helps
- 1Act immediately — the faster you report, the better any chance of a freeze or reversal.
- 2Contact your bank, card issuer, or payment app now and ask them to dispute, recall, or freeze the payment.
- 3Report it to the authorities — here’s who to contact wherever you live. You often need a police or report reference number to pursue a dispute.
- 4Save everything: transaction IDs, wallet addresses, screenshots, phone numbers and usernames.
!Beware “recovery” scams
After you’ve been scammed, you may be contacted by someone promising to recover your money for an upfront fee, a “tax”, or a crypto payment. That is a second scam — often run by the same people, working from lists of known victims. No legitimate agency, lawyer, or service guarantees recovery or asks you to pay up front, and real police and banks never charge you to investigate. Never pay anyone to get your money back.
Where to Report — Wherever You Are
Call your bank immediately on the official number to freeze the account and try to recall the transfer — then report. In Australia, report to Scamwatch (scamwatch.gov.au); reporting within the first hour gives the best chance of stopping the money. Reporting fast gives the best chance of freezing the money before it’s gone. Then file with your national authority:
India — Helpline 1930 · cybercrime.gov.in
Report in the first hours (the “golden hour”) to freeze funds. Run by I4C, Ministry of Home Affairs.
United States — FTC · FBI IC3
reportfraud.ftc.gov and ic3.gov.
United Kingdom — Action Fraud
actionfraud.police.uk · 0300 123 2040 (in Scotland, call Police Scotland on 101).
Australia — Scamwatch (National Anti-Scam Centre)
scamwatch.gov.au.
Canada — Canadian Anti-Fraud Centre
antifraudcentre-centreantifraude.ca · 1-888-495-8501.
Anywhere else: contact your bank and local police right away, and search “report a scam” plus your country. For cross-border cases, econsumer.gov collects international complaints. Beware anyone who later offers to “recover” your money for an upfront fee — that is a second scam.
Frequently Asked Questions
The call showed my bank’s real name and number. Doesn’t that prove it’s them?
No. Caller ID and even SMS sender names are trivially spoofed, so scammers routinely display your bank’s genuine name and number. Never treat caller ID as proof — hang up and call the bank back yourself on the number printed on your card.
They knew my name and some account details. How, if they’re not really my bank?
From data breaches, leaked databases, or earlier phishing. Scammers use those fragments to sound legitimate. Knowing a few details about you does not mean the caller is your bank.
What is a “safe account” — should I move my money to protect it?
There is no such thing. A real bank never asks you to move your money to a “safe”, “holding”, or “new” account — that account belongs to the scammer. If anyone tells you to do this, it is a scam, full stop.
My bank’s fraud team really might call me. How do I tell real from fake?
Assume any inbound “fraud” call could be fake, then verify it yourself: hang up, wait a moment, and call your bank on the official number from your card or its app. A genuine bank is completely fine with you calling back — a scammer will try to stop you.
I already moved money or shared a code. What do I do now?
Act immediately: call your bank on its official number to freeze the account and try to recall the transfer, change your online-banking password, and report it (below). Speed is everything — the first hour matters most.
Related reading: the fake customer-care number scam (when you call them), how to get your money back after a scam, or browse all our scam guides.
Informational only — not legal or financial advice. Sources: Australia’s National Anti-Scam Centre / Scamwatch and the ACCC, UK Finance and Action Fraud on authorised-push-payment fraud, and FTC / FBI IC3 guidance on bank-impersonation scams. Verify against primary sources.