In this guide 10 sections
At a glance
The short version.
Watch for
- A caller asks for a one-time password, PIN, full password or card security code
- Instructions to transfer money to protect it, reverse fraud or help an investigation
- A request to install screen-sharing or remote-access software
Already acted?
Call the bank immediately and ask for its fraud team; speed can affect recovery options.
See every recovery stepWhat is changing now
The current pattern.
Current warnings describe criminals impersonating financial-institution support by text, email and phone. They may know real personal details, spoof caller ID, reference a genuine transaction or send a copied fraud-reporting page before requesting credentials or a transfer.
How it works
How the scam unfolds.
The contact opens with a believable threat: a suspicious payment, hacked account, expiring card or urgent security investigation. The scammer may already know your name, address, bank or partial account information from stolen or commercially available data.
They offer immediate protection, but the proposed solution gives them control. Common requests include reading out a one-time passcode, installing remote-access software, approving a notification, adding a new payee or moving money to a supposedly safe account.
Caller ID and text-message threads can be spoofed or misleading. A real-looking contact channel does not change the safest response: stop and initiate a new contact through the bank’s established route.
Warning signs
Reasons to stop and verify.
- A caller asks for a one-time password, PIN, full password or card security code
- Instructions to transfer money to protect it, reverse fraud or help an investigation
- A request to install screen-sharing or remote-access software
- Pressure to keep the call secret from bank staff, relatives or police
- A warning not to hang up or a claim that delay will make you liable
- Contact details supplied in the warning instead of the bank’s normal channels
Spot the signs
What it can look like.
Highlighted phrases are warning signs; the numbered notes explain each one.
HARBOUR BANK1 (warning sign 1)
Harbour Bank: Did you attempt a payment of £1,284.00 to ELECTRO-WORLD LTD?2 (warning sign 2) If not, call our fraud team now on 0808 157 01923 (warning sign 3).
You call the number in the message
CallerThank you for calling. We stopped that payment, but the criminals may still have access to your account.
CallerWe are opening a protected account in your name. You will need to move your balance there today.4 (warning sign 4)
CallerPlease don’t discuss this with branch staff5 (warning sign 5) — we believe someone inside may be involved. Read me the code we have just sent6 (warning sign 6) to confirm it is you.
- A sender name anyone can type
Text messages can display a bank’s name and may even land in the same thread as genuine alerts. The name is not proof of who sent it.
- A specific, frightening payment
An exact amount and merchant make the alert feel real. You can check it yourself in your banking app without replying or calling.
- A number supplied by the message
Calling the number in the text connects you to whoever sent it. Use the number on your card or in the official app instead.
- The ‘safe account’
Banks do not ask customers to move money to a new account to protect it. This request alone is enough to end the call.
- Cutting you off from real staff
Being told not to trust branch staff isolates you from the people who could stop the transfer.
- A request for a one-time code
The code was sent because someone is using your account details right now. Reading it out hands them the final key.
Your bank can investigate and block suspicious payments without you moving money. When in doubt, hang up and call the number on the back of your card.
Composite example: names, numbers and “.example” addresses are fictional.
Worked example
A realistic pattern, separated into evidence.
This composite example is educational. It does not describe a real person or reproduce a live malicious message.
The fraud team offers a ‘safe account’
- 01The opening
A caller says a card payment was blocked and correctly names the bank and part of the account holder’s address. The displayed caller ID matches the number printed on the bank card.
- 02The escalation
The caller says an employee may be involved, so branch staff cannot be trusted. They ask the customer to move the balance to a newly created account and approve a mobile-banking notification while staying on the line.
- 03The decision point
Knowledge of personal data and a familiar caller ID increase confidence but do not authenticate the call. The instruction to move money, conceal the conversation and approve access is the controlling evidence.
Independent verification
Test the request without using its evidence.
These checks deliberately move the decision away from the person, link, number or account that introduced the request.
- 01
Break the live call
Do not let the caller keep control of the pace. End the call even if they claim that disconnecting will make you liable or stop an investigation.
- 02
Open a trusted banking route
Use the official app, a saved bookmark, a recent statement or the number printed on the physical card. Avoid paid search advertisements and message links.
- 03
Describe, do not repeat, the instruction
Tell the real bank that a caller requested a code, approval, new payee or transfer. Do not carry out the action merely to let staff observe it.
- 04
Review account-control changes
Check contact details, devices, payees, cards and recent transactions. A scam may aim at account access even when no transfer has completed.
Prevention
Make the next attempt harder.
- 01
Turn on payment and login alerts
Real-time notifications from your banking app let you check activity yourself, so an alarming message or call is far less persuasive.
- 02
Save the number from your card
Add your bank’s official number to your contacts today, copied from the card or the official app, so you are not searching for it under pressure.
- 03
Find your app’s security controls
Many banking apps let you freeze a card, lower transfer limits or add checks for new payees. Knowing where these controls are makes it easier to act quickly.
- 04
Agree a household rule
Decide that nobody in the household moves money, installs software or reads out codes during an incoming call — every time, whatever the story.
If you already acted
Protect access and contact the real provider.
- Call the bank immediately and ask for its fraud team; speed can affect recovery options.
- Ask the bank to review new payees, transfers, cards, devices and changed contact details.
- Change exposed banking and email passwords from a trusted device.
- Remove remote-access software and seek trusted technical help before using the device for banking again.
- Report the impersonation through the bank’s official channel and the relevant authority where you live.
Common questions
Short answers to real doubts.
The call showed my bank’s real number. Doesn’t that prove it was genuine?
No. Caller ID can be spoofed, so a scam call can display the number printed on your card. Treat any incoming call as unverified however it appears, and make a fresh outgoing call to the number on your card or in your banking app.
Will my bank ever ask me to move money to a safe account?
Banks do not ask customers to move money to a new account to protect it. If anyone — including someone claiming to be from your bank, the police or a regulator — asks you to do this, end the contact and call your bank using its official number.
How do I call my bank safely after a suspicious call?
Use the number on the back of your card, on a recent statement or inside the official app — not a number from a message or a search advert. On some landlines a caller can keep the line open after you hang up and even play a fake dial tone, so call from a different phone, such as a mobile, or ring someone you know first to make sure the line has cleared.
Sources
Official guidance used for this article.
Stop & Verify summarises these sources for general education. Reporting routes and legal protections vary by location.