Bank Impersonation Scams: Fake Fraud-Department Calls and Texts

You get a text or a call about suspicious activity on your account. It sounds urgent, and the person on the line sounds calm and helpful, like someone who is on your side. That is exactly the feeling these scams are built to create. The moment they ask you to confirm a code, share your PIN, or move money to a “safe account,” you are no longer talking to your bank. You are talking to a thief.

Bank impersonation is now one of the most common and most expensive scams in the country, and it has grown because it is so convincing. This guide explains how it works, shows a real example, and gives you a clear plan to protect yourself and the people you love.

What it is

A bank impersonation scam is when a criminal pretends to be your bank or credit card company. The goal is to get something valuable from you: your online banking login, a one-time security code, your card or PIN, or your trust, so they can talk you into moving money yourself.

The scam works because it flips your guard around. Instead of asking for money the way an obvious scammer would, the caller acts like they are protecting your money. They warn you about fraud, then position themselves as the helper who will keep you safe. By the time the conversation turns to codes or transfers, you feel like you are working together against a common enemy.

How it works

1. A text or call warns about a suspicious charge, a locked account, or a login from a new device.
2. The caller offers to help and asks you to “verify your identity” first.
3. They request a one-time passcode, your PIN, or your full online banking login.
4. In the costliest version, they say your account is under attack and you must move your money to a “safe” or “protected” account immediately. That account belongs to the scammer.

The timing is part of the trick. A text often comes first, asking something like “Did you authorize a $500 transfer? Reply YES or NO.” The instant you reply, a “fraud agent” calls, so it feels like the bank is responding to you in real time. That sense of a fast, caring response is what lowers your defenses.

A real example

Margaret, a retired teacher, gets a text that looks like it is from her bank asking whether she just sent $750 through Zelle. She did not, so she replies NO. Her phone rings within seconds. The caller is warm, professional, and knows the last four digits of her account. He says her account has been compromised and that he will help her “reverse” the transfer and secure her money.

He walks her through her banking app step by step. What he is actually doing is guiding her to set up a new transfer to an account he controls, which he describes as a “secure holding account in your name.” He stays kind and patient the whole time, and tells her not to discuss it with the branch because the investigation is confidential. By the time Margaret calls her real bank the next morning, the money is gone. Nothing about the call felt like a scam, and that is the point.

By the numbers

• Bank impersonation is the single most reported type of text-message scam, according to FTC data, with fake alerts often posing as large national banks.
• Among business impersonation scams, bank impersonators account for the highest reported losses, and the costliest cases begin with a fake security alert that convinces people to move money to “protect” it (FTC).
• People reported losing $3.5 billion to imposter scams in 2025, more than any other fraud category, and nearly one in three fraud reports was an imposter scam (FTC).

Red flags to watch for

• A request for a one-time code, PIN, or password. Your real bank never needs these from you.
• Pressure to act right now, before someone “drains your account.”
• Anyone telling you to move money to a different account to keep it safe.
• A reply-to number or link that did not come from your bank’s official app or the number on your card.
• A caller who tells you to keep the matter secret from branch staff or family.

How to protect yourself

1. Hang up or ignore the message. You can always call back, and a real fraud team will not mind.
2. Call your bank using only the number on the back of your card or inside its official app.
3. Never share a one-time code, PIN, or password with anyone who contacts you. Codes are for you alone.
4. Remember the golden rule: a real bank will never ask you to move your money to a “safe account.” That request is always a scam.
5. Turn on transaction alerts in your banking app so you see real activity yourself, not through a stranger.
6. Shrink your digital footprint. Scammers often buy your phone number and account clues from data-broker and people-search sites. Removing your information from those sites, which a privacy or data-removal service can do on your behalf, makes you harder to find and target in the first place.
7. Loop in your family. Agreeing as a family that you will pause and check with each other before moving money takes the pressure off the moment and stops most of these scams cold.

If you’ve already responded

Act fast, because speed is what gives you the best chance of recovery. Call your bank immediately on its official number, report exactly what happened, and ask them to stop or reverse the transfer and freeze the account. Change your online banking password and turn on two-step verification. Then report it to the FTC at ReportFraud.ftc.gov. It is not your fault. These scripts are designed by professionals to fool careful people.

In the news

• FDIC: Bank Impersonation Scams and Fake Banks
• FTC warns of record $3.5 billion in imposter-scam losses in 2025 (BleepingComputer)

Sources

• FTC: Bank impersonation is the most-reported text message scam
• FTC: Four-fold increase in impersonation scams hitting older adults
• FTC data spotlight: False alarm, real scam
• FBI IC3: Elder Fraud