Blog/WhatsApp & mobile money

Bank Impersonation Calls: How the Fraud Department Scam Works

A caller from 'your bank's fraud team' knows your name, shows your bank's number and wants to protect your money. How the scam works and the one test that exposes it.

CyberWatch AI3 October 2026 · 2 min read
An older man on a phone call

The phone shows your bank's name. The caller knows your name, maybe your address and the last digits of your card. They say suspicious transactions have been spotted and they need your help to stop them. It feels like protection. It is the setup for theft.

How the script works

  1. Alarm: "A payment of 900 is pending to an overseas merchant. Did you authorise it?"
  2. Trust: spoofed caller ID, personal details, professional tone. See caller ID spoofing.
  3. The ask: read out a code, confirm your PIN, approve a notification, install an app, or move money to a "safe account". See the safe account scam.
  4. Secrecy: "Don't tell branch staff; they may be involved."

The hang-up test

Hang up and call the number on the back of your card. A genuine bank will never object. If possible, use another phone, or wait a few minutes before calling.

What banks never do

  • Ask for your full PIN, password or one-time codes. See one-time passwords.
  • Ask you to move money to protect it.
  • Ask you to install remote access or screen-sharing apps. See remote access requests.
  • Tell you to lie to branch staff.

See the full list: how banks contact you, and how they never will. Related: fake fraud department calls. For more, see the complete guide to financial scams.

Frequently asked questions

The call showed my bank's real number. Is it genuine?

Not necessarily. Caller ID can be faked. Hang up and call the number on your card yourself.

What will a real bank never ask on a call?

Your full PIN or password, one-time codes, to move money to another account, or to install remote access apps.

Should I call back straight away?

Use a different phone if you can, or wait a few minutes, because some scammers keep the line open.

Sources

  1. Take Five to Stop Fraud, Take Five (UK Finance)
  2. APP scams, UK Payment Systems Regulator
  3. Phone Scams, US Federal Trade Commission
Share this article
LinkedIn WhatsApp X
For organizations

Your people get these messages at work too.

CyberWatch AI sends your staff realistic practice attacks, trains the gaps it finds, and shows management exactly where the organization stands.