Fake Bank Fraud Department Call Scam

The fake bank fraud department scam is one of the most financially damaging impersonation frauds. It exploits the public's familiarity with legitimate bank security calls to steal money and credentials simultaneously.

Banks genuinely do call customers about suspicious transactions, making this scenario feel completely plausible. Scammers can spoof the bank's real phone number so that it appears correctly on caller ID, and they may already have partial account information bought from data brokers, adding further credibility.

The defining trick is the 'safe account' instruction. No real bank will ever ask you to transfer your own money to a new account they have set up for you. This is the single most reliable red flag for this scam.

The scammer calls using a spoofed number matching the bank's helpline. They open by citing a specific suspicious transaction — sometimes a real one they gleaned from a data breach, sometimes invented — and create alarm. They say the account is at risk and the victim must act immediately to protect their funds.

They then collect verification information: date of birth, account number, a one-time passcode sent by the real bank's systems (which the scammer triggered by attempting a login). With these credentials, they either log in themselves or instruct the victim to authorise transfers.

The transfer destination is described as a 'safe account,' a 'temporary holding account,' or a new account 'in the customer's own name.' In reality it is controlled by the fraudster. After the transfer, the caller assures the victim they will receive follow-up information — which never arrives.

Fear of losing money triggers immediate compliance. The caller appears to be helping the victim, not stealing from them, which bypasses typical fraud defences. Real bank fraud calls do happen, so the scenario is entirely believable.

Caller ID spoofing removes the one visible check most people rely on. Once the victim is convinced the call is genuine, any request — however unusual — is interpreted as a legitimate protective measure rather than a warning sign.

The victim receives a call, sometimes with caller ID showing the bank's real number. The caller says suspicious activity has been detected on the victim's account and that funds are at risk. They ask the victim to verify their identity using account details, a one-time passcode received by text, or both. They then instruct the victim to transfer funds to a 'secure holding account' while the fraud is investigated. The victim follows the instructions, believing they are protecting their money. In reality the 'holding account' belongs to the scammer, and the victim's own security credentials have been used to authorise the transfer.

'Good afternoon, this is the fraud prevention team at [bank name]. We have detected an unusual transaction of [amount] on your account made this morning. Can you confirm whether you authorised this?'

'For your security, we need to move your funds to a protected account while our investigation takes place. I will guide you through the transfer now.'

'A one-time verification code has just been sent to your registered number. Can you read that out to me so we can secure your account immediately?'

Hang up the call and wait at least 10 minutes (or use a different phone) before calling back, because scammers can hold an open line on landlines to intercept a follow-up call to the same number. Call your bank on the number printed on the back of your debit or credit card, or on the bank's official website.

No legitimate bank will ever ask you to transfer money to a different account to keep it safe. No legitimate bank will ask for a one-time passcode that arrived by text — that code is intended for you alone. If either of these is requested, end the call.