Bank / fraud department impersonation
The caller pretends to be your bank's fraud department 'confirming suspicious activity'. The real goal is your online banking credentials, card number, or a real-time transfer authorization (often via Zelle or wire).
The one-time-passcode variant is the most dangerous form: the scammer triggers a real transfer on your account, your bank texts a genuine code, and reading that code aloud authorizes the theft — banks then often dispute reimbursement because 'you' approved it. Zelle and wire transfers settle irreversibly in minutes, which is exactly why fraud departments in these scripts always push real-time payment rails. A bank that actually suspects fraud freezes activity; it never needs you to move money anywhere.
How to recognize it
- Caller ID shows your bank's real number (spoofed)
- You are asked for your password, PIN, or a one-time passcode sent to your phone
- Pressure to 'move money to a safe account'
What to do
- Hang up and call the number on the back of your card
- Never read a one-time passcode to a caller — banks never ask
- There is no such thing as a 'safe account' transfer
Where to report
Sources
FAQ
What should I do first if I suspect a bank / fraud department impersonation call?
Hang up without pressing anything or confirming any details. Hang up and call the number on the back of your card. Then report it through the channels listed below.
I already gave the caller money or information — now what?
Act on the money first: contact your bank or card issuer immediately, and if you paid by gift card, call the card company to try freezing the balance. Then file a report at ReportFraud.ftc.gov and, if identity data leaked, follow the recovery plan at IdentityTheft.gov.
Does the number that called me identify the scammer?
Usually not — the display is routinely spoofed. Report the number anyway: combined with time and content, it still helps investigators map calling campaigns.