Bank Impersonation Scams — How Fraudsters Pretend to Be Your Bank
Bank impersonation scams are among the most financially devastating forms of fraud, with victims losing tens of thousands. Learn exactly how these scams work and how to protect yourself.
A call comes in from what appears to be your bank's official number. The caller knows your name, perhaps your address, and some recent transaction details. They tell you there's been suspicious activity on your account — and they need your help to protect it. Every detail feels real. And yet it's fraud.
Bank impersonation scams — also called "vishing" (voice phishing) — are among the most sophisticated and financially devastating forms of fraud. Average losses per victim are in the thousands, and in many cases tens of thousands.
How bank impersonation scams work
The setup: The scammer calls you, often displaying your bank's real phone number on your caller ID through a technique called spoofing. They know your name, and possibly your address or the last four digits of your card — information obtained from data breaches or purchased lists.
Building credibility: They describe "suspicious transactions" on your account. Sometimes these are fabricated. Sometimes they're real transactions they've looked up. The detail makes them seem legitimate.
Creating urgency: "We need to act now to protect your account." "If we don't move quickly, the fraudsters will empty your balance."
The request: This is where real banks and scammers differ completely. The scammer asks you to:
- Transfer funds to a "safe account" they've set up for you
- Confirm your full PIN or online banking password
- Allow them remote access to your banking app
- Withdraw cash and hand it to a "courier" they're sending
A real bank will never, under any circumstances, ask you to do any of these things.
The "safe account" scam
The most common variant. The caller tells you that criminals have gained access to your account and that to protect your money, you need to immediately transfer it to a new "safe" account they're setting up in your name. They walk you through the transfer, reassuring you throughout.
The "safe account" belongs to the scammer. Once the transfer is complete, the money is moved through a chain of accounts within minutes and is gone.
Why people fall for it
These calls are not like the cartoon villain scams people imagine. The scammers are professional, calm, and knowledgeable. They:
- Address you by your correct name
- Reference real transactions or account details
- Use bank-appropriate terminology
- Are patient and reassuring rather than pushy
- Have often been practising this exact call hundreds of times
The psychological manipulation is sophisticated: they create both urgency and trust simultaneously.
The definitive rules for bank calls
Your bank will NEVER:
- Ask you to transfer money to a "safe account"
- Ask for your full PIN or online banking password
FAQ
Your bank may call you, but they will never ask you to transfer money to a 'safe account,' confirm your full PIN, or provide your online banking password. If in doubt, hang up and call the number on your card.
In the UK, the Authorised Push Payment Code means many banks are required to reimburse victims. In other countries, recovery is harder. Report immediately — speed matters.
From data breaches, social media, or simply guessing — most people bank with one of a handful of major banks. They may also use auto-dialling and adapt their story when you confirm which bank you use.
A scammer posing as your bank tells you your account has been compromised and instructs you to transfer funds to a 'safe account' for protection. The safe account belongs to the scammer. Your real bank will never do this.