How does a bank impersonation scam work?
Bank impersonators use spoofed phone numbers and insider-level personal detail to convince victims their account is under attack, then direct them to move money to a 'safe account' controlled by the fraudsters.
Last reviewed: 10 June 2026
Explanation
The call arrives from a number that matches the bank's genuine helpline — often displayed on the back of the victim's card. The caller sounds professional and knowledgeable, using terminology and account details that feel authentic. They explain that the victim's account has been compromised: suspicious transactions have been detected and the money must be moved immediately to a secure holding account pending investigation.
The target is then walked through a transfer process, either via online banking or by visiting a branch. Some victims are told to collect cash and hand it to a 'security officer' or 'courier'. Others are guided to move funds to a new account set up with the same bank. In all cases, the destination account is controlled by the fraudster.
The personal detail that gives the call credibility often comes from data breaches or phishing. Fraudsters may know the last four card digits, recent transaction amounts, or the victim's address. Real bank fraud teams do have this information, so its presence does not distinguish a real call from a fraudulent one.
Real banks never ask customers to transfer money to a 'safe' account. Real fraud investigations are handled entirely within the bank's systems without requiring the customer to move funds. Any such instruction is fraudulent regardless of how the caller sounds or what information they hold.
Common red flags
- A caller claims to be from your bank and says your account has been compromised
- You are instructed to move funds to a new or 'safe' account immediately
- A courier arrives to collect cash from your home as part of a 'security process'
- The caller urges secrecy — do not tell branch staff what the call is about
- The caller asks you to download a remote-access app to 'check' your account
- Caller ID shows your bank's genuine number
What to do now
- Hang up and call your bank directly using the number on your card or official website
- Do not use any number the caller provides — it may route back to the fraudsters
- Your bank will never ask you to move money to a 'safe account'
- If a courier collects cash, report to police and your bank immediately
- If funds have been transferred, your bank's fraud team can assess potential recovery
- Report to your national consumer protection authority and fraud reporting service
Frequently asked questions
If the caller ID shows my real bank's number, is the call safe?
No. Caller ID spoofing is simple and cheap. Fraudsters regularly display genuine bank numbers to add credibility. Always hang up and call your bank independently to verify.
What is an 'authorised push payment' (APP) fraud?
APP fraud occurs when you are manipulated into authorising a transfer yourself. Because you authorised the payment, banks historically did not always reimburse losses. Regulations in many countries now require banks to reimburse victims in more cases.
How do fraudsters know details about my account?
From previous data breaches, smishing messages that you may have responded to, or the dark-web purchase of profiles built from multiple leaked databases. Partial knowledge is used to establish the impression of full legitimate access.