Is a vishing call from my bank about suspected fraud on my account real?
It could be real but is more likely a scam. Always hang up and call your bank back using the number on your card — never use a number from the call.
Last reviewed: 1 August 2026
Explanation
Voice phishing ('vishing') is one of the most effective forms of telephone fraud. Callers spoof your bank's real phone number, use your name and partial account details to sound credible, and claim there is suspicious activity that requires urgent action. The action they suggest — confirming details, transferring money, or installing an app — is the fraud itself. Real bank fraud teams do call customers about suspicious transactions, but they never ask you to move money, share your full PIN, or install remote-access software. The safest rule: thank the caller, hang up, wait a few minutes, and call the number on the back of your card.
What makes vishing dangerous is its similarity to something real: banks do call about suspicious transactions, and the fraudster's opening lines mimic that call precisely — right down to offering to 'verify' themselves with details bought from data breaches. The divergence comes at the action: genuine fraud teams block cards and reverse transactions on their side; impostors need you to act — move money, read codes, install software.
The call-back habit defeats spoofing entirely, but the details matter: use a number you sourced yourself, wait a few minutes or use a different phone in case the line is held open, and describe what happened rather than assuming the earlier call was real. Any genuine issue will exist in the bank's records; anything that exists only in the caller's narrative was the scam.
Common red flags
- Caller asks you to transfer money to a 'safe account'
- Requests your full PIN, password, or one-time passcode
- Asks you to install an app to 'secure' your device
- Insists you must not call the bank's main number because the fraud team is handling it separately
What to do now
- Politely end the call without providing any information
- Wait at least 5 minutes (on a landline, use a different phone) then call the number on your card
- Report the vishing attempt to your bank's fraud line
- File a report with your national fraud authority
Frequently asked questions
Why should I wait before calling back on a landline?
Scammers on landlines sometimes stay on the line after you hang up, so a call placed immediately may reconnect to the scammer. Waiting 5 minutes — or using a mobile phone — closes that risk.
The caller offered to prove themselves by reading my card number and address. Doesn't that verify them?
No — those details circulate in breach data, and reciting them is a scripted trust-building move. The only verification that counts is you initiating a call to the bank's published number.