Can a bank employee or security team ever ask for my full online banking password over the phone?
No. Banks never ask for your full password. Legitimate security verification asks for specific characters from a memorable word — not the complete password.
Last reviewed: 10 June 2026
Explanation
Online banking passwords are hashed and stored in a form that bank employees cannot see, even if they wanted to. There is no legitimate operational reason for a bank employee to request your full password. Their verification systems use partial memorable words, PIN verification, or app-based authentication — none of which require you to disclose your complete password.
Fraudsters call posing as bank security staff and ask for your full password under the pretext of confirming your identity before dealing with a security issue. With your password, they can log in to your account, access financial information, and potentially transfer funds or change security settings.
A related variation asks for your Personal Identification Number (PIN) — the four- or six-digit number for your physical card. Banks never ask for this either. Your PIN should never leave your memory under any circumstances.
If a caller asks for your full password, full PIN, or tells you to enter them on any device other than your own verified banking interface, end the call immediately and contact your bank through the official number on your card.
Common red flags
- Caller asks for your full online banking password
- Caller asks for your card PIN
- Told to enter your password on a website or device provided by the caller
- Call was unsolicited and relates to a security issue on your account
- Caller says they need the password to 'reset' or 'verify' your account
- Creates urgency by claiming your account has been accessed by someone else
What to do now
- Refuse and end the call immediately
- Change your online banking password straight away
- Call your bank on the number on the back of your card
- Check your account for any unauthorised activity or changes
- Report the call to your bank's fraud team
- Report to your national fraud authority
Frequently asked questions
What does a genuine bank security verification look like?
Genuine bank verification typically asks for specific characters from a memorable word (e.g., the third and fifth character), date of birth, and partial account details. They never ask for complete passwords, full card numbers, or full PINs.
I gave my full password — what should I do immediately?
Change the password immediately from a device you trust. Call your bank on the official number to report the call and ask them to review for any unauthorised access. Enable any additional security settings available.