Fake Payroll Update Requests via Phone Calls
Callers impersonate employees to phone payroll or HR and request direct-deposit changes, diverting wages by adding a confident human voice to the deception.
Part of: Fake Payroll Update Email Scam
Last reviewed: 1 June 2026
A phone call can make a payroll diversion request feel personal and credible. A caller posing as an employee asking to update their bank details may persuade payroll staff to act, especially when the request mirrors a routine change and the caller sounds confident.
Caller ID can be spoofed to show a familiar name or extension, reinforcing the impression that the call is internal. The live conversation lets the impersonator handle questions on the spot, smoothing over doubts that a written request might leave open.
How this scam works on Phone calls
The caller phones payroll or HR claiming to be an employee who needs to change their direct-deposit account, perhaps citing a new bank or a closed account. They reference plausible personal details to appear genuine and ask for the change before the next pay run.
The caller may follow up with a spoofed email to reinforce the request, or rely on the call alone if controls are weak. They discourage any callback, framing verification as unnecessary for a simple update.
If payroll applies the change, the next salary payment is diverted to the criminal. The fraud surfaces only when the genuine employee reports their pay did not arrive.
Common red flags
- A call requesting a change to an employee's direct-deposit details
- Caller ID showing an employee name but an unfamiliar voice
- A request made just before a pay run
- Reluctance to allow a callback to verify the request
- A new bank account explained only vaguely
- Pressure to apply the change immediately
How to protect yourself
- Verify payroll changes by calling the employee back on a known number
- Never apply a direct-deposit change from an inbound call alone
- Treat caller ID as unreliable and confirm identity independently
- Require a secondary verification step for all payroll changes
- Apply a confirmation window before new bank details take effect
- Brief payroll staff that employees can be impersonated by voice
How to report it
- Report the call to your national cybercrime or fraud reporting service
- Notify your bank immediately if any pay was diverted
- Record the caller's number and claims for HR and security
Frequently asked questions
An employee called payroll to change their bank details. Is the call enough?
No. Caller ID can be spoofed and voices imitated. Call the employee back on a known internal number, or confirm in person, before changing any direct-deposit details. Treat reluctance to be called back as a warning sign.