Your bank says to move money to a ‘safe account’. Stop at the transfer.
The caller may know your name, your bank and part of your account history. None of that makes their destination account safe.
The frightening part of a bank-impersonation call is not always the threat. It can be the relief. Someone appears to have noticed the problem before you did, explains it confidently, and offers a way to protect your savings. You are no longer deciding whether to trust a stranger. You feel as if you are cooperating with the person stopping the stranger.
The transfer is the point to stop. If an unexpected caller wants you to move money to a destination they supply, buy cryptocurrency, withdraw cash for collection or keep a transfer secret, leave the conversation and contact the real institution independently. A safety story does not make a payment safe.
Why knowing your details is not proof
A caller knowing a fact about you proves that they know that fact. It does not prove where they work, how they obtained the information, or what will happen if you follow their instructions. A real name, familiar company logo and convincing phone display can all sit inside an unverified conversation.
The FDIC’s bank-impersonation guidance describes criminals posing as banks to obtain personal and account information. The practical lesson is to separate recognition from verification. Recognizing the bank’s name is easy. Verifying that you are speaking to it requires a contact route not supplied by the caller.
Do not turn the call into a quiz about your recent purchases. If the caller answers correctly, you may feel more committed even though the central question remains unresolved. If they answer incorrectly, you have learned something useful, but you still do not need to continue. Leaving the call is a valid response to uncertainty.
Read the requested action, not the job title
An impersonator may describe themselves as a fraud investigator, bank security officer, regulator or police liaison. Those labels change the emotional tone, but the requested action gives you something concrete to evaluate.
| What they ask you to do | Why it matters | A safer alternative |
|---|---|---|
| Transfer money to a new account | You are moving funds to a destination introduced by an unverified person | End contact and ask the bank through its own channel |
| Read out a one-time code | The code may approve an account or transaction action, not identify you to the caller | Read the full message yourself; do not relay the code |
| Stay on the line while visiting the bank | It keeps the caller present during your decision and other people’s questions | End the call before discussing the situation with staff |
| Hide the real reason for the transfer | It prevents the institution from understanding the suspected fraud | Tell staff accurately what the caller said |
| Hand cash or valuables to a courier | Physical collection does not create official authority | Do not arrange a handover; use independently verified reporting routes |
This is a decision aid, not a way to authenticate someone from one phrase. The same transfer can be described as temporary, reversible, protected, monitored or part of an investigation. Those are claims within the call. They are not controls over the destination account.
What an independent check actually looks like
Use an app you already installed, a saved official website, or the number printed on your card or statement. Avoid a search result advertisement, a number in the suspicious message or a number the caller tells you to dial. A second person in the same call is not a second source.
Tell the real institution that you received a possible impersonation call. Explain the requested action before trying to repeat every detail of the story. Ask whether there is a genuine alert on the account and whether any credentials, cards or transactions need attention. Follow the provider’s verification process only after establishing that independent route.
If someone transfers you to another supposed department, the conversation has not become independent. The FTC describes impersonation chains in which a routine account problem escalates into a claim that money must be moved for protection. Multiple roles can belong to one invented story.
You do not have to prove the caller is a criminal before declining their instructions. A bank can investigate a concern through its own systems. The caller’s objection that hanging up will make you responsible for the loss is another unverified claim, not a reason to surrender the check.
Three different exposure levels
You only answered. Hearing a story is not the same as approving a transfer or exposing account access. Note what you remember and contact the institution if the claim concerns your account. Do not assume the device is compromised merely because the call was unsettling.
You shared information or approved something. Tell the real bank precisely what happened: a password was entered, a code was spoken, a notification was approved, a screen was shared, or a new payee was added. These are different events. Do not reduce them all to “I clicked something,” because that makes it harder to choose the right containment step.
You sent money. Contact the relevant payment provider immediately. Explain that you were deceived into the payment, give the destination and reference, and ask what reversal, recall or account-protection options are available. Do not describe an authorized-but-deceived transfer as an unauthorized transaction merely because you hope that wording will help. Accurate facts matter.
The FTC’s post-scam guidance separates payment methods and types of exposed information. Recovery is not guaranteed, but uncertainty is not a reason to delay contacting the provider. A police or consumer report and a request to stop a payment serve different purposes; one does not automatically perform the other.
A short record is enough to start
You may be shaken, embarrassed or struggling to remember the sequence. Start with a simple note: when the call happened, the identity claimed, the action requested, the action you took and the account or payment involved. Preserve messages and transaction confirmations you already have.
Do not reopen a suspicious page or call the person back to collect a better recording. Do not publicly post unredacted statements, identity documents, codes or full account numbers. The institution can tell you which records it needs through its verified process.
If another person is helping you, give them a defined task: sit with you while you call the bank, write down the reference number, or help find the official reporting page. You do not need to give a helper full control of every account to receive useful support.
Helping a parent or friend without a confrontation
A person still on the call may believe they are protecting their family. Beginning with an accusation can turn the conversation into a dispute about whether they are capable or sensible. Focus on the process instead: “Let’s check the request with the bank using the number on your card before any money moves.”
That sentence does not require them to accept that the entire story is false. It asks for an independent check of one action. If they have already paid, help them make the next call rather than replaying the decision as a test they failed. The useful question is what exposure remains, not who should have noticed first.
Be alert to follow-up calls from people offering guaranteed recovery. A person who knows the loss amount may have obtained the original information, not recovered the money. Read our guide to the second-payment recovery scam before engaging with an unexpected offer of help.
Questions people ask after the call
What if the number matched my bank?
A matching display is not enough to establish the caller’s identity. End contact and use an independently obtained route. Do not treat a return call to a number inside the suspicious message as independent verification.
What if my real bank also sends fraud alerts?
Real alerts and fraudulent alerts can exist at the same time. You can check a genuine alert through the bank’s app or established contact route without following the unexpected caller’s transfer instructions.
Does reporting guarantee a refund?
No. The provider, payment method, timing and applicable rules affect available remedies. Report promptly and accurately, ask for the relevant process and keep the reference number.
For a broader exposure checklist, use first steps after a suspicious interaction. If the bank story began with a computer warning or refund notice, the fake support guide explains the device-access branch.
Found a factual error or a source that has changed?
Send a correction →
