Bank impersonation scam in the UK: how to recognise a fake fraud call

A convincing caller can know your name, bank and recent transaction details. The safest test is not how professional the call sounds, but whether you independently reconnect with the bank.

Fraudsters create urgency and authority

The caller often claims there is a suspicious transfer, compromised card or employee stealing from your account. They may know personal details from data leaks or earlier phishing. The story is designed to make you act before you verify. Requests to stay on the line, avoid telling family, move money urgently or help with a secret investigation are strong warning signs.

A genuine bank can handle a suspected compromise without asking you to transfer your savings to a newly supplied 'safe' account. Moving money under the caller’s direction is exactly how many impersonation scams become APP fraud.

Caller ID is not identity

Phone numbers can be spoofed, and a fraud call can appear to come from a familiar bank number. Do not authenticate the caller based on the display. Hang up and reconnect using a route you control: the number on the physical card, a secure in-app call function or the bank’s official website.

If you are using a landline and worry the call has not disconnected, use another phone or wait before calling back. Do not dial a number the caller gives you for a supposedly separate security department.

One-time codes authorise actions

Scammers may say they need a code to cancel fraud, identify you or secure the account. In reality, the code may approve a payment, add a digital wallet or register a new device. Read the accompanying message carefully. Banks commonly state that staff will not ask you to disclose certain security codes.

Treat a one-time code like a signature. If you did not start the action described in the message, do not approve it. If the caller becomes angry or says the money will be lost unless you act within seconds, that pressure is further reason to stop.

Remote access is another major warning sign

A supposed fraud adviser may ask you to install screen-sharing or remote-control software. That can let the criminal watch login details, manipulate what you see and guide you through transfers. Do not install remote-access tools because of an unsolicited banking call.

If you already installed one, disconnect the device from the conversation, contact the bank from another trusted device and follow reliable security guidance before using the compromised phone or computer for banking again.

If you already transferred money

Contact the bank immediately and state that you were deceived by an impersonation scam. Ask it to attempt recovery and assess the payment under the relevant APP scam reimbursement rules. Preserve the number shown, call time, messages, account details and any screen-sharing information.

Report the event through the appropriate UK fraud-reporting route as well, but do not delay the bank contact while completing other reports. The first practical objective is to secure remaining funds and stop additional payments. Change compromised credentials and secure email if the criminal saw or obtained them.

Use a personal verification rule for every unexpected bank call

Decide in advance that you will never transfer money, install software or disclose security codes because of an inbound call. If the caller reports genuine fraud, ending the call does not stop the real bank from protecting the account. You can reconnect independently and continue the conversation on a trusted channel.

Tell family members the same rule, particularly anyone who may be targeted because of age, language or low confidence with technology. A shared household rule removes the need to judge how convincing each caller sounds under pressure.

Scammers sometimes keep a victim on the phone while telling them to search the bank’s real number online, knowing the victim may not truly disconnect before dialling. End the call completely and use a different device if necessary. If the caller says the bank’s normal staff cannot be trusted because of an internal investigation, treat that as a classic isolation tactic rather than evidence of sophistication.

Fraudsters may also spoof text-message sender names so a fake message appears in the same conversation thread as genuine bank alerts. Do not treat the thread position as proof. Open the banking app independently and verify the supposed transaction there. If the alert is genuine, the bank’s own secure channel will still show what action is required.

If a caller tells you to lie to branch staff or describe a transfer as a purchase for yourself, stop immediately. Legitimate bank employees do not need customers to mislead other bank employees in order to protect an account. Requests for secrecy are designed to defeat the safeguards that might otherwise expose the scam.

Sources and verification

• FCA — Fraudulent payments
• Take Five — Impersonation scams

MyBankAnswers uses official provider and UK regulatory sources wherever practical. Information is general and does not constitute financial advice.