Bank impersonation scam: how to break the fraud script
A caller who knows your name, bank and recent details is not necessarily from the bank. Fraudsters can spoof caller ID and use stolen personal information to sound convincing. The decisive warning is what they ask you to do - especially move money to a “safe account”, reveal security codes or install remote-access software.
If an unexpected fraud call creates urgency, end it. Contact the bank yourself using the app, the number on the back of your card or another trusted source. Do not call back using a number supplied by the caller or shown only in the suspicious message.
Assume caller ID and urgency can be manipulated
The FCA warns that fraudsters can spoof numbers so the display appears to show a genuine organisation. A call labelled with your bank’s name therefore proves very little. Criminals may also know your address, recent purchase or part of an account number from other data sources.
Treat identity as unproven until you reconnect independently. A genuine bank employee will understand why a customer ends an unexpected call and uses an official channel.
One common script says the account is compromised and the customer must transfer savings to a new “safe” account. The transfer is actually going to the criminal or a money mule. No amount of caller knowledge makes that instruction sensible.
If the caller tells you not to speak to branch staff, invent a reason for the transfer or ignore warnings from online banking, end the call immediately. Those instructions are designed to bypass the bank’s fraud controls.
Do the factual check before making another move: record who contacted you, which number or channel they used, what they asked you to do and whether you disclosed a code, approved a payment or installed remote-access software. The aim is not paperwork for its own sake. It is to stop a timing, identity or limit question from turning into a second problem because money was moved, an instruction was cancelled or evidence disappeared before the original position was understood.
Never move money to a so-called safe account
A caller may say a code is needed to cancel fraud. Read the message that accompanies the code. It may say it is registering a device, adding a payee or authorising a payment. Never give a code simply because the person sounds like the fraud team.
Likewise, do not approve a banking-app prompt you did not initiate. The app is not asking whether you trust the caller; it is authorising a specific action.
Another tactic is to ask the customer to install screen-sharing or remote-support software so the “bank” can help. That can let the criminal see balances, messages and security information or control the device while payments are made.
A bank does not need remote control of your personal computer or phone to secure your account. If such software was installed during a suspicious call, disconnect the device, contact the bank from another trusted device and remove or investigate the software before using the device for banking again.
Worked example: a caller says £2,400 is at risk and instructs you to move it to a new account within ten minutes. End the call, use the number on your card or the bank app opened independently and ask whether the bank actually contacted you. The pause breaks the scammer's control of the conversation. The numbers are illustrative, not a prediction of what your provider will do. Their purpose is to force the decision into pounds, dates and confirmed instructions so that a vague promise such as "it should be fine" does not become your only control.
Treat codes, approval prompts and remote access as high risk
Contact the bank and say that you believe you were deceived into authorising a payment. Give the amount, time, beneficiary and the scam story. For eligible UK Faster Payments and CHAPS APP scam claims made under the current reimbursement rules, different protections can apply, including claim limits and conditions.
Preserve messages and call details, but speed matters more than perfect evidence. The bank may be able to attempt recovery while the money is still moving through accounts.
If the scammer persuaded you to disclose card details as well as make a transfer, tell the bank about both exposures. The transfer claim and the card-security response may follow different processes, and cancelling or replacing the card does not automatically create a report for the bank transfer. Ask the bank to confirm which cards, devices and payment instructions it has secured so no part of the incident is left untreated.
A useful rule is: no unexpected caller can make you transfer money, reveal a one-time code or install software. If any of those requests appear, the call ends. You then contact the organisation independently.
That rule works better than trying to judge every caller’s accent, confidence or technical knowledge. Fraudsters are skilled at urgency; a fixed verification habit removes the decision from the stressful moment.
Your evidence pack should include call logs, texts, screenshots, account numbers supplied by the scammer, payment references and any remote-access software or device permissions added during the incident. Put the items in date order and note which fact each one proves. This matters because a dispute is easier to resolve when the provider can see the original instruction, the actual outcome and the financial consequence without reconstructing the sequence from several phone calls.
Report any payment quickly with exact transaction details
Can a scammer make the real bank number appear on caller ID?
Yes. Number spoofing can make a call appear to come from a genuine organisation.
Will a bank ask me to move money to a safe account?
Treat that instruction as a scam warning. End the call and contact the bank independently.
What if I already made the transfer?
Tell the bank immediately that you were deceived into authorising it and provide the payment details and scam circumstances.
If money has already moved, report the exact payment immediately and state that you were deceived by someone impersonating the bank. Also secure the device and email account if the scammer gained remote access or credentials. The final control is verification: confirm that the account, payment or record now reflects the agreed outcome. If it does not, use the same chronology and references in a formal complaint so the second review starts with facts rather than another retelling.
Final verification for bank impersonation scams: before you treat this step as complete, compare the provider's confirmation with the next real account event. This keeps the follow-up focused on the unresolved fact under "Report any payment quickly with exact transaction details" rather than reopening every part of the issue.
Sources and verification
Victoria Hughes - Consumer Rights Specialist
I judge an unexpected bank call by what the caller asks me to do, not by how much they know about me. A criminal can know my name, bank and even recent spending. What they should never be able to justify is moving money to a “safe account”, reading out a one-time code or installing remote-access software. My preferred response is deliberately boring: end the call and open the bank’s app myself. Caller ID does not change that because numbers can be spoofed. If I already sent money, I would contact the bank immediately and clearly describe the payment as an impersonation APP scam. I would not keep talking to the fraudster hoping to recover it privately. Evidence matters, so save call logs and messages, but speed matters too. The strongest anti-scam habit is independent reconnection: when someone creates urgency, change the channel and verify the story on your own terms. Pre-commitment is powerful. If my rule is 'unexpected caller equals hang up and reconnect', I do not have to outsmart a professional scammer while they are creating panic. I would teach this rule to relatives as well: genuine banks will still be there after you hang up and call them back yourself. A real fraud team does not need panic to keep your money safe.
MyBankAnswers uses official provider and UK regulatory sources wherever practical. Information is general and does not constitute financial advice.