Bank-Impersonation Call + SMS Scams: How to Protect Your Accounts

What to Do Right Now

If you are on a call or received an urgent text about bank fraud, stop. Do not share any verification codes. Hang up and call your bank directly using the number on your statement or card.

How the Scam Works

Bank impersonation scams are highly coordinated operations designed to bypass your bank's security measures by exploiting your trust. The scam typically begins with an urgent text message or a phone call. The message warns you of unauthorized transactions, a compromised account, or suspicious wire transfers. Because the communication appears to come from a household-name financial institution, it immediately triggers panic.

If you reply to the text or answer the call, you are connected to a scammer posing as a bank fraud investigator. They will speak with professional authority, often using real banking terminology. They will claim that to "protect" your money from an active threat, you must immediately move or transfer your money to "protect" it. Alternatively, they may attempt to log into your online banking portal themselves, triggering a security code that they will ask you to read aloud to "verify your identity." Once they have that code or convince you to move the funds, your money is gone.

The Numbers

According to data from the Federal Trade Commission (FTC), imposter scams were the most reported fraud category in 2025, accounting for nearly one in three fraud reports. Consumers reported losing $3.5 billion to imposter scams in 2025, a nearly threefold increase since 2020 FTC, 2026. Within business impersonation, bank impersonators accounted for the highest reported losses, contributing to a near $1 billion total for business impersonation in 2025 alone.

Furthermore, the FTC's historical data shows that bank impersonation is the most common text message scam reported to the agency, with reports of text-based bank impersonation increasing nearly twentyfold between 2019 and 2022 FTC, 2023.

Red Flags

Recognizing the warning signs of an impersonation scam can help you stop a thief before they access your funds. Watch out for these critical red flags:

• High-pressure urgency: The caller insists that you must act immediately to prevent your account from being drained or locked.
• Requests to move money: A legitimate bank will never ask you to move or transfer your money to "protect" it FTC, 2024.
• Demands for verification codes: No real bank employee will ever ask you to read back a one-time passcode or verification code sent to your phone or email FTC, 2024.
• Unsolicited incoming calls: Even if your caller ID displays your bank's actual name or phone number, scammers can easily fake this information using caller ID spoofing FCC, 2024.

The Callback Rule

An effective defense against bank impersonation is the callback rule: Hang up and call back using a trusted number.

If you receive any suspicious or urgent communication regarding your accounts, do not use the phone number provided by the caller, and do not reply to the text message. Instead, immediately end the call. Find your physical debit or credit card, or look at your official monthly bank statement, and call the customer service number printed directly on it FTC, 2024. This ensures you are speaking to a real representative of your financial institution, not an imposter.

What to Do in the Moment

If you are currently on the phone with someone claiming to be from your bank's fraud department, take these steps immediately:

1. Take a beat: The FBI urges consumers to pause and resist the pressure to act quickly FBI, 2026. Scammers rely on fear to bypass your critical thinking.
2. Do not share codes: If a verification code arrives on your device, do not read it aloud or forward it. That code is the "deadbolt" protecting your account FTC, 2024.
3. Hang up: Do not engage in further conversation, even if they threaten to lock your account.
4. Verify independently: Call your bank directly using the number on your card or statement.

What to Do If You Already Shared a Code or Moved Money

If you realized too late that you were speaking to a scammer, you must act immediately to contain the damage:

1. Contact your bank's official fraud department: Inform them immediately that you have been scammed, shared a verification code, or authorized a transfer. They may be able to freeze your accounts or stop pending transactions, though recovery is not guaranteed.
2. Change your credentials: Immediately log into your online banking portal from a secure device and change your password. If you use the same password elsewhere, change those accounts as well.
3. Report the scam: File a report with the FTC at ReportFraud.ftc.gov. If you lost funds, file a complaint with the FBI's Internet Crime Complaint Center at ic3.gov as soon as possible, documenting all contact methods, dates, and transaction details FBI, 2026.

Defense First: Five Minutes of Setup

You can make your accounts significantly harder to hack by taking a few proactive security steps today:

• Enable two-factor authentication: Ensure this is active on all financial accounts. These codes act as a second lock on your account, making it harder for scammers to gain access even if they have your password FTC, 2024.
• Inquire about call-blocking tools: Speak with your mobile carrier about default spam-filtering and call-blocking tools to reduce the number of spoofed robocalls reaching your device FCC, 2024.

Quick Answers

Why does my caller ID say it is my bank calling?

Scammers use a technique called caller ID spoofing to deliberately falsify the information transmitted to your screen FCC, 2024. They can make the call appear to come from your bank's real customer service number, even though they are calling from an entirely different location.

Will my bank reimburse me if I was scammed into transferring money?

Probably not. Bank accounts have fewer consumer protections than credit cards FTC, 2024. If you are tricked into voluntarily moving or wiring your own money out of your account, the bank generally considers the transaction authorized, and recovering those funds is extremely difficult.

Why do scammers want my verification code?

Your password is only the first lock on your account. The verification code acts as a second lock (two-factor authentication) FTC, 2024. Scammers who already have your password or username need this code to bypass security, log in, and drain your funds.

More Alerts

To stay ahead of evolving digital threats, read our guides on protecting yourself from other common scams:

• SIM-Swap Scams: How to Secure Your Mobile Number
• Package Delivery Text Scams (USPS, UPS, FedEx)
• Tech Support Pop-Up Scams (Fake Microsoft and Apple Warnings)