Bank Transfer App Fraud
Scammers trick you into authorising a bank transfer or mobile payment to an account they control, using social engineering, fake emergencies, or impersonation.
Last reviewed: 1 June 2026
What this scam is
Bank transfer app fraud — often called authorised push payment (APP) fraud — occurs when a scammer manipulates you into sending money from your own bank account or payment app directly to an account they control. Unlike card fraud or account takeover, you initiate and authorise the transfer yourself, which is why it is particularly difficult to reverse and why banks have historically struggled to classify it as straightforward fraud.
The scammer does not need to hack your account, steal your password, or intercept a transaction. They simply convince you that sending the money is the right thing to do — to pay a bill, help a family member in crisis, pay for a purchase, or comply with an official instruction. The authorisation is genuine; the context in which you were persuaded to give it is not.
Bank transfer app fraud affects people using internet banking, mobile banking apps, and instant payment services. It spans a wide range of scenarios — fake invoices, purchase scams, romance or friendship scams, impersonation of banks or authorities, and emergency appeals — but all share the same mechanism: a transfer you choose to make, based on information a scammer has manufactured.
Losses can be very large. Because the money moves immediately to an account the scammer controls, and may be quickly moved onward, the window for recovery is short. Regulatory pressure in several countries has improved banks' obligations to reimburse victims in some circumstances, but recovery is not guaranteed and depends heavily on the speed of reporting.
How it works
The approach varies by variant, but the core structure is consistent. The scammer creates a convincing reason for you to send money. They may pose as your bank, a government body, a solicitor handling a property purchase, a supplier, a family member, or a romantic partner. The story is tailored to feel urgent, authoritative, and personally relevant.
In purchase scams, you pay for goods — a car, electronics, holiday accommodation — that do not exist or are never delivered. In invoice redirection, a scammer intercepts or mimics genuine business correspondence and asks you to pay into a new account. In impersonation fraud, someone posing as your bank warns of suspicious activity and asks you to 'protect' your money by moving it to a 'safe account' — which they control.
In romance and friendship variants, a trust relationship is built over time before an emergency — a medical bill, a flight home, a business crisis — is introduced. The emotional investment already made makes the transfer feel natural.
Once the transfer is sent, the funds are typically moved quickly — sometimes across multiple accounts or converted to cryptocurrency — making tracing and recovery harder with every passing hour.
Why this scam works
Bank transfer fraud is effective because it exploits the trust and authority we place in institutions and people we have reason to believe are genuine. A caller who knows your name, your bank's name, and details about your recent transactions can be very convincing when posing as a bank fraud investigator.
Urgency is the scammer's most powerful tool. When told that your account is under attack, that a property purchase will fall through, or that a family member is in immediate danger, the normal process of verification feels like an obstacle rather than a safeguard. The sense that a delay will cost you far more than acting now is manufactured deliberately.
The fact that the victim initiates the payment also creates a powerful psychological effect after the fact — it can be harder to identify as fraud when you chose to send the money, which delays reporting.
A typical pattern
A person receives a call from someone claiming to be from their bank's fraud team. The caller knows their name, the last four digits of their card, and their recent transactions. They say a criminal has access to the account and the only way to protect the funds is to transfer them to a new 'secure' account while the bank investigates. The person transfers the money. The bank's real fraud team makes no such request — the 'secure account' belongs to the scammer.
Common red flags
- A caller who knows personal or banking details but asks you to move money urgently
- Instruction to transfer money to a 'safe account' — banks never ask for this
- Payment details for a known supplier or solicitor have 'changed' via email
- Pressure to act immediately before a purchase, deal, or safe window closes
- An online contact asks for an emergency transfer after building rapport
- Being told not to tell your bank what the transfer is really for
- A payment app contact you have never met asks for money for an emergency
- Any instruction not to use the phone number on the back of your card to verify
- The person discourages you from speaking to anyone else before acting
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
This is [bank name] fraud prevention. We've detected suspicious activity. To protect your funds, please transfer [amount] to this secure account: [account].
Hi — I'm stuck abroad after a medical emergency. I need [amount] urgently, I'll pay you back as soon as I'm home. Please transfer to [account].
Please note our bank details have changed for this invoice. Please update your records and send [amount] to [account] going forward.
Your purchase of [item] is confirmed. Please send [amount] to [account] within 24 hours to secure the order.
URGENT: Our solicitors need the completion funds by 3pm today. Please transfer [amount] to [account] to avoid losing the property.
I've been locked out of my account and need to borrow [amount] until Monday. Can you transfer to [account]? I'll send it straight back.
Common variations
- Safe account scam: impersonating a bank fraud team to move funds
- Invoice redirection: intercepting or spoofing business payment details
- Purchase scam: goods paid for via bank transfer that never arrive
- Conveyancing fraud: redirecting property completion funds
- Romance or friendship emergency: urgent financial request after online relationship
- Impersonation of HMRC, police, or a regulator demanding immediate payment
How to verify before you act
Before making any payment, particularly to a new account or in response to an urgent request, verify the payee by a completely independent route.
If someone claiming to be your bank calls and asks you to move money, hang up and call the number on the back of your card. Do not call back on the same line — scammers can keep the line open. If you receive an email or message asking you to change payment details for a known supplier or solicitor, call them on a number you have used before — not a number in the message.
For any romantic or online friendship that has led to a financial request, take time — at minimum 24 hours — and speak to someone you trust in person before sending anything. No genuine emergency prevents a short delay for verification.
Bank employees will never ask you to move money to a 'safe account'. Any such instruction is a scam without exception.
Payment methods used
- Bank transfer
- Faster Payments
- Mobile payment apps
Who is usually targeted
- Property buyers (invoice redirection)
- Online shoppers (purchase scams)
- Businesses (invoice fraud)
- People in online relationships
- Anyone receiving unexpected 'bank fraud' calls
What to do immediately
- Contact your bank immediately — call the number on the back of your card, not any number in a message
- Ask the bank to freeze the destination account and initiate a recall of the payment
- Report to your national fraud reporting service as soon as possible
- If the payment was to a business contact, warn them their systems may have been compromised
- Preserve all communications and transfer records before doing anything else
- Do not make any further payments in response to follow-up calls or messages
- Seek emotional support if needed — this type of fraud can be deeply distressing
How to prevent it
- Never move money to a 'safe account' at the request of anyone who contacts you
- Verify any change in payment details by calling the sender on a number you already hold
- Use confirmation-of-payee features where available to check a payee name matches the account
- Take at least 24 hours before any large or unexpected payment, however urgent it feels
- Set up a verbal code with family members for genuine emergencies
- Never tell your bank a different reason for a transfer than the real one
- Be especially careful with property purchase payments — verify solicitor details at every stage
- Report suspicious calls to your bank and fraud reporting service even if you did not send money
Evidence to preserve
- Bank transfer receipts and transaction references
- All messages, emails, and call notes from the contact
- The account details you were asked to pay to
- Any invoice, letter, or instruction document provided
- The original message or call that prompted the transfer
- Notes on how the contact reached you and what they claimed
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Will my bank refund an authorised push payment?
In the UK, a voluntary reimbursement code and subsequent regulation have improved protections for victims in some cases — contact your bank immediately and escalate to the Financial Ombudsman Service if unsatisfied. In other countries, rules vary. Speed of reporting is critical.
What is confirmation of payee?
Confirmation of payee is a check that verifies the account holder's name matches the sort code and account number before a payment is sent. It is not foolproof but adds a layer of verification. Enable it if your bank offers it and check the result carefully.
How can someone claim to be from my bank and know my details?
Scammers gather personal data from data breaches, social media, and phishing attacks. Knowing your name and some account details does not mean the caller is your bank. Always hang up and call the number on the back of your card independently.
What is invoice redirection fraud?
Scammers intercept or mimic legitimate business emails and redirect payments by changing bank details in invoices or instructions. Both individuals and businesses are targeted, particularly around property purchases or large business payments.
Can I get the money back if I report quickly?
Speed matters enormously. The sooner you contact your bank, the higher the chance they can attempt to freeze the destination account before funds are moved on. Some recalls succeed; many do not — report as quickly as you possibly can.
Is it my fault for authorising the payment?
No. Authorised push payment fraud involves deliberate, sophisticated social engineering. The scammer manufactured a convincing false reality. Being deceived by a skilled fraudster is not a reflection of your intelligence or care.
What is a safe account scam?
A safe account scam involves a caller posing as a bank fraud investigator telling you your account has been compromised and you must move funds to a 'safe' account they provide. No bank ever makes such a request — the 'safe account' belongs to the scammer.
How do I avoid property purchase fraud?
Verify solicitor bank details by calling the firm on a number you find independently — not from an email. Conveyancing firms generally confirm that payment details will not change and communicate this clearly at the start of the process. Any unexpected change in details is a red flag.