Bank impersonation Active · 2024–2026 Imposter scams

Did "your bank" call about fraud and tell you to move money? Stop.

In a nutshell
  • A text or call warns of fraud on your account. A "fraud department" agent then offers to help you protect your money.
  • The call is the fraud. Your real bank will never tell you to move money to a "safe account," send it to yourself on Zelle, or read back a verification code.
  • Whatever you move or send goes straight to the scammer, and because you authorized it, banks rarely refund it.
  • If you're on a call like this now, hang up. If you already moved money, follow the steps below.
Our verdict

This is a scam. Anyone who tells you to move money to "protect" it, send it to yourself, or share a one-time code is a scammer, no matter how official the caller ID looks.1 Your money is safe where it is. Moving it is what puts it at risk.

Advertisement 728×90 · Replace with AdSense unit

Does this sound familiar?

You got a text or call about suspicious activity on your account. When you responded, someone from the "fraud department" took over: calm, professional, urgent. They said your money was at risk and they'd help you secure it, by moving it to a "safe account," sending it to yourself, or confirming a code they'd just sent. The caller ID even showed your bank's name. That's the part that makes it work.

Below are reconstructed examples of how this scam opens, recreated to show the pattern. The bank and Zelle names are real services that scammers impersonate. They do not contact customers this way. (Illustrations, not real screenshots. Names and numbers are fictional.)

?
Free Msg
+1 (555) 555-0118
Text Message · Today 3:11 PM
FRAUD ALERT: Did you attempt a $812.40 payment to "QuickPay LLC"? Reply YES to confirm or NO to dispute. Std msg rates apply.
The "reply YES or NO" alert is the opener. Either reply tells them your number is live, and triggers the follow-up call.
🏦
Your Bank
spoofed to match real number
Incoming call · Today 3:14 PM
"Hi, this is the fraud department. We blocked a charge but your account is still exposed. To secure your funds, I'll help you move them to a protected account in your name."
The callback is spoofed to show the bank's real number. Caller ID can be faked. It is not proof of anything.
#
Verification code
Automated · 32665
Text Message · Today 3:18 PM
Your one-time code is 408 192. Do not share it with anyone. Your bank will never ask for this code.
The caller asks you to read this back. The code's own warning is the whole answer: never share it, not even with "the bank."

The opener varies (a text to reply to, a robocall, a Zelle "fraud alert"), but it always funnels to a live "agent" who needs you to move money or hand over a code.


How it works

This is social engineering, not hacking. The scammer doesn't need your password. They need you to act, quickly, while you're scared. (The screens below are illustrations of how this typically appears.)

1
The fraud "alert"
It starts with a text or robocall about a suspicious charge, often asking you to reply YES or NO, or press a key. The goal is to get you engaged and worried, and to confirm your number is real so a live caller can follow up.
?
Free Msg
+1 (555) 555-0118
FRAUD ALERT: $812.40 payment to "QuickPay LLC". Reply YES to confirm, NO to dispute.
3:11 PM
Arrives via
SMS Call Email
2
The spoofed callback
A "fraud department" agent calls, or you're told to call back. The number is spoofed to match your bank's real line, and they may know your name and recent activity. They sound exactly like a real fraud team, calm and helpful, building trust before the ask.
Incoming call
Your Bank
Fraud Department
caller ID spoofed
Caller ID is trivial to fake. A call "from your bank" proves nothing on its own.
3
The code, or the "pay yourself" trick
Now the real ask. They tell you to read back a one-time code "to verify you," or to "send money to yourself" on Zelle to keep it safe. The code lets them reset your login or enrol your number to their account. The "pay yourself" transfer actually goes to them.3
🔐 "Let's verify it's really you"
One-time code just sent to you
408 192
⚠ Never read this to anyone
"Can you read me the 6-digit code we just sent, so I can confirm your identity?"
Your bank already knows it's you. Only a scammer needs that code, or asks you to "pay yourself."
4
The money's gone, and you authorized it
The transfer leaves your account, fast and irreversible. Because you approved it yourself, it counts as an authorized payment, which carries far weaker protection than a stolen-card charge. Recovery is hard, and the scammer may circle back posing as "recovery."
Where the money went…
Zelle "to yourself"−$2,000
"Safe account" wire−$6,500
Second "verification"−$3,200
Why it rarely comes back
Authorized transfers and instant payments like Zelle are designed to be irreversible. Protections are weaker than for a stolen-card charge.4
"Authorized" is the trap. The whole script exists to make you press send yourself.
Remember
A real bank never tells you to move money to "protect" it.
Never read back a one-time code. Nobody legitimate needs it.
Hang up and call the number on your card. Spoofed IDs lie.
Urgency is the weapon. Slow down and the scam falls apart.

Red flags to catch it early

None of these alone is proof. Several together means stop.

"Move your money to keep it safe"

The single clearest sign. Real banks never ask you to transfer funds to a "safe" or "protected" account. Your money is fine where it is.1

Asked to "send money to yourself"

A Zelle hallmark. You're told to send a payment to yourself to "reverse" or "verify," but the details route it to the scammer.3

They want a one-time code

Any request to read back a code texted to you. That code lets them into your account or links your number to theirs.

"Just read me the 6-digit code to verify it's you."

Caller ID shows your bank, but they called you

Spoofing makes any name or number appear. An inbound "fraud department" call is not proof, even if it matches your bank exactly.

Pressure and secrecy

You must act now, stay on the line, and not tell branch staff because "an employee may be involved." Real banks don't operate like this.

They ask for full credentials

Online banking password, full card number, PIN, or SSN. A real fraud team already has your account on screen and won't need these.

Worried it might be real?

Sometimes there genuinely is a problem with an account. Here's how to check safely:

  • Hang up. If it's a real issue, it will still be there in five minutes. A real bank won't object to you calling back.
  • Call the number on the back of your card or on your statement, not any number the caller gave you, and not by calling back the number that rang you.
  • Never move money or share a code to "resolve" anything over an inbound call.
  • Check your account yourself in your bank's official app or website to see if any charge is actually pending.

Already moved money or shared a code?

If this is happening now

Call your real bank immediately

Speed matters most with transfers. The sooner you act, the better the (still slim) odds.

1
Hang up and call your bank's real number Use the number on your card or statement. Tell them exactly what happened, that you were induced to transfer funds or shared a one-time code. Ask them to freeze transfers and recall any payment still in progress.
2
If a wire or transfer just went out, say so now A wire sent minutes ago may still be stoppable. Zelle and other instant payments are usually irreversible once they land, but your bank should still be told immediately so they can try and document it.
3
Lock down your login If you shared a code or credentials, change your online banking password and any reused passwords, and turn on or reset two-factor authentication. The code may have let them into your account.
4
Document everything Phone numbers, times, the agent's name, amounts, and any reference or recipient details. Take screenshots of the texts and any transfers. You'll need this for the bank and your report.
5
Report it File with the authority for your country below. In the US that's the FTC, and the FBI if you lost money. Reports help track these operations even when recovery isn't possible.
6
Ignore anyone who later offers to "get your money back" People who just lost money are the prime target for a follow-up money recovery scam. No legitimate service charges an upfront fee to recover funds.

Where to report it

Wherever you are, contact your bank first using a number you can independently verify, then report to your national fraud body.

How big is this problem?

Bank and business impersonation is one of the largest fraud categories reported in the US, and the "move your money to safety" script is one of its most damaging forms.

$2.95B
Reported lost to business and government impersonation scams in 20242
$3,000
Typical reported loss for a consumer who falls for a bank impersonation text2
~20×
Rise in bank impersonation text reports since 2019, per the FTC2
Authorized
Why these losses are hard to recover: you sent the money yourself4

The FTC's guidance is unusually blunt for a government agency: if someone says you have to move your money to protect it, "it's always a scam," and no one from a real fraud department will ever ask for a verification code.1 Its analysis of 2022 reports found bank impersonation was the single most-reported text scam, up nearly twentyfold since 2019, with a typical victim of that specific scam losing around $3,000.2

The Zelle variant is especially effective because the payment is instant and, once it lands, effectively irreversible. Zelle itself stresses that it's meant for people you know and trust, and that authorized transfers generally can't be reversed.3 That's the lever the scam pulls: it doesn't break into your account, it gets you to push the money out yourself, which strips away the protections a stolen-card charge would have.4

The defense is simple and it doesn't change: slow down and verify on a channel you control. Hang up, call the number on your card, and never move money or share a code because of an incoming call, however urgent or official it sounds.

Sources
  1. Federal Trade Commission, "Got a call about fraud activity on your bank account? It could be a scammer." The "never move money to protect it" and "never share a verification code" guidance.
  2. Federal Trade Commission, "IYKYK: the top text scams of 2022" data spotlight, and "FTC Highlights Actions to Protect Consumers from Impersonation Scams" (April 2025). Bank impersonation as the most-reported text scam, ~20x rise since 2019, the $3,000 median loss for this specific scam, and the $2.95B business/government impersonation total for 2024.
  3. Zelle / Early Warning Services consumer safety guidance and major-bank fraud alerts on the "pay yourself" impersonation scam. The send-money-to-yourself mechanic and the irreversibility of authorized Zelle transfers. Cited as documented industry guidance.
  4. Federal Trade Commission and Consumer Financial Protection Bureau guidance on authorized vs. unauthorized transfers. Why authorized transfers and instant payments carry weaker protections than card fraud.
Researched and maintained by ScamChecker.online

We document recurring online scam patterns using primary sources: government agencies, law enforcement, and security researchers. Banks and Zelle are legitimate services being impersonated here, not the source of these calls. Ads on this page do not influence our reporting. Read about how we research or who we are.

Last verified: May 2026 · Reviewed against current FTC and FDIC guidance
Advertisement 728×90 · Replace with AdSense unit