Phone scams › Bank impersonation scam

Bank Impersonation Scams: Fake Fraud Alerts and 'Safe Account' Calls

Bank impersonation scams start with a fake fraud-alert text or call that looks like your bank, then a 'fraud department' caller talks you into moving money to a 'safe account' or sharing login codes. Real banks never ask you to transfer money to protect it and never ask for full passwords or one-time codes.

Also known as: fake fraud department call, safe account scam, bank text alert scam.

By the LookUpSomeone editorial team · Last reviewed 2026-08-06

Got a suspicious call or text?

Check the Number Before You Call Back

See the owner’s name, carrier, location, and any scam reports in seconds. (May reveal social media profiles, online footprints, pics and more.)

100% confidential lookup - the person you search will not know.

How does the Bank impersonation scam work?

A text asks 'Did you authorize a $900 charge? Reply NO or call...' to create urgency.
The follow-up caller, often spoofing the bank's real number, walks you through 'securing' your account.
They ask you to read back one-time passcodes (which actually authorize their logins or transfers), or to wire funds to a 'safe account' they control.
Some versions recruit you to 'help catch a corrupt employee' to explain the secrecy.

What does the Bank impersonation scam sound like?

A typical opening, paraphrased from the scripts reported to fraud agencies. Wording varies, but if your call or text follows this shape, treat it as this scam:

Unknown caller Typical example

FRAUD ALERT from your bank: Did you attempt a purchase of $912.47 at BestBuy.com? Reply YES or NO. [After you reply NO, a call follows:] This is the fraud department. We're seeing active attempts on your account right now. To protect your funds we need to move them to a secure holding account while we investigate. I'll also send you a verification code to confirm your identity - just read it back to me.

Common variations of this scam

Safe account transfer. The 'fraud department' convinces you to wire or e-transfer your balance to a 'secure' account that belongs to the scammer.
One-time passcode harvest. The caller triggers real login or payment codes to your phone and has you read them back, using them to take over the account in real time.
Card courier pickup. You're told your card is compromised and a bank courier will collect it; the courier is the scammer, sometimes asking for your PIN 'for deactivation'.
Fraud investigation recruitment. You're asked to secretly help catch a corrupt bank employee by moving money and lying to branch staff about why.

What are the warning signs?

Any instruction to move money to a new or 'safe' account
Requests to read back a one-time passcode sent to your phone
Pressure to keep the call secret from branch staff or family
Caller ID matching your bank (spoofed) used as proof
Being told to lie to your bank about the purpose of a transfer

Who do these scammers target?

Anyone with mobile banking gets the bait texts, since they're blasted at random. The safe-account and courier variants concentrate on older customers with substantial balances, while the OTP-harvest version hits younger, phone-first customers who are used to reading codes quickly. Spoofed caller ID makes every group more vulnerable.

Scammers also spoof local numbers to raise answer rates, so a familiar-looking area code means nothing on its own. If a specific code keeps calling you, check its scam activity in the area code directory.

What should you do?

Hang up and call the number on the back of your card, not any number from the text or call.
Never read one-time codes to anyone; banks use them to verify YOU, so anyone asking for one is logging into your account.
Run the number through a reverse phone lookup to check for prior reports.
US: report to the FTC and your bank's fraud line. Canada: report to your bank and the Canadian Anti-Fraud Centre.
If money moved: call the bank's fraud line immediately; fast reporting is the single biggest factor in recovery.

Official reporting: FTC: report fraud (US) · Canadian Anti-Fraud Centre (CA)

How do you protect yourself going forward?

Adopt one habit that defeats all variants: hang up and call the number printed on the back of your card.
Never read a texted code to any caller; those codes authorize logins and payments, and banks never ask for them by phone.
Know that no bank moves your money to protect it or sends couriers for cards; both are theft scripts.
Set up your bank's real alerts in the app so you recognize the legitimate format and channel.

Frequently asked questions

The call came from my bank's real phone number. How?

Number spoofing lets scammers display any number, including your bank's. Legitimacy can only be established by YOU calling the bank on its published number.

What is a 'safe account'?

A fiction. Banks protect compromised accounts by freezing them internally. Any request to transfer funds out 'for safety' is theft in progress.

Why would they ask me to read back a texted code?

That code is a one-time passcode for a login or payment they are attempting on your account right then. Reading it back completes their attack.

My bank texted me a fraud alert. Are those always fake?

No, banks do send real fraud alerts. The safe response is to contact the bank through its official app or the number on your card rather than replying to or calling numbers in the message.

Getting calls from a specific area code? Check its scam activity in the area code directory, or go straight to a reverse phone lookup.