Is a Call From Your Bank Ever a Scam?

A call can look and sound genuine and still be a scam. Here is how bank impersonation works, how real banks behave on the phone, and how to verify a caller safely.

Summary

• Fraudsters can gather your name and account details in advance, so a caller knowing basic information about you is not proof they are genuine.
• Caller ID can be spoofed, so a call can appear to come from your bank’s real number. Verify by calling a number from your card or statement.
• No genuine bank, and not the FCA, will ask you to move money to a safe account or share PINs, passwords or one-time passcodes.
• The FCA received 4,465 reports of fraudsters impersonating it in the first six months of 2025, and 480 people sent money to those fraudsters.
• Report fraud to Action Fraud on 0300 123 2040, or in Scotland to Police Scotland on 101, and tell your bank even if you lost nothing.

A phone call from someone who knows your name, your bank and even part of your account number can still be a criminal. Impersonation scams rely on borrowed trust, and knowing a few of your details is often the criminal’s opening move rather than proof of identity. This guide explains how these calls work, how genuine banks behave on the phone, and how to check a caller without putting your money at risk.

Why Do Callers Claiming to Be Your Bank Sound So Convincing?

Because they prepare. Fraudsters can gather details about you from data leaks and public sources, then use them to sound as if your file is open in front of them. That is why the Financial Conduct Authority (FCA), the regulator for financial firms in the UK, tells consumers to treat unexpected calls with caution and never assume they are genuine, even when the caller knows basic information about you. The technique is called impersonation: pretending to be an organisation you trust in order to extract money or information.

The scale is significant. In the US, the Federal Trade Commission says bank impersonation was the most reported scam through text messages in 2022, up nearly twentyfold since 2019, and that a typical victim of the text version lost $3,000. In the UK, the FCA alone received 4,465 reports of fraudsters impersonating it in the first six months of 2025, and 480 people sent money to those fraudsters.

What Will a Genuine Bank Never Ask For?

A genuine bank will not ask you to move money to another account, reveal your full password, or read out your PIN. The FCA states plainly that it will never ask you to transfer money or hand over sensitive banking details such as account PINs and passwords, and banks work on the same principle: your credentials are yours alone.

Some requests mark a call out immediately:

• asking for your PIN, full password or a one-time passcode sent to your phone
• telling you to move money to a “safe account” because your bank is supposedly under investigation
• asking you to download software or give remote access to your device
• requesting your online banking login details so a “fraud team” can check your account

If a caller asks for any of these, end the call. No genuine organisation needs them.

Can You Trust the Number on Your Caller ID?

No. Callers can falsify the details shown on caller ID, a technique called spoofing, so a call can appear to come from your bank’s genuine number. The FCA says scammers have made its own switchboard numbers appear on caller displays. The FDIC’s inspector general has also described spoofing attempts in which callers knew the actual names of employees at the business they targeted.

Texts are affected too. A message can appear in the same thread as genuine alerts from your bank, because sender details can be faked. Treat the number or sender name as decoration, not evidence.

How Do You Check a Call Without Risking Your Account?

Hang up and call back on a number you find independently: the one printed on your debit or credit card, your bank statement or the bank’s own website. Do not redial the number that called you, and do not use contact details the caller gives you, because they lead back to the fraudster.

• If someone claims to be from the FCA, call its consumer helpline on 0800 111 6768. The regulator says its team will not mind waiting while you check.
• Check any firm against the FCA’s Firm Checker using the reference number and contact details listed there, and type the Firm Checker address yourself rather than following a link.
• Use call-blocking tools where your phone or provider offers them.

A genuine bank will not object to you calling it back. Pressure to stay on the line is itself a warning sign.

What Pressure Tactics Do These Scripts Use?

The scripts create urgency and authority. Callers say fraud is happening on your account right now, that your money must be moved to a safe account, or that you must confirm your details at once. The FCA’s warning signs cover the pattern: unexpected contact, pressure to act quickly, flattery to put you at ease, and confident claims of authority. Honest organisations give you time to think and will not object to you hanging up.

Scammers also adapt. The FCA describes fraudsters targeting earlier scam victims and claiming it can recover their lost money, then persuading them to hand over further funds. Someone who has already lost money to an investment scam may be targeted a second time by the same criminals posing as the regulator.

What Should You Do If You Have Already Shared Details?

Act quickly and contact your bank using a number from your card or statement. If you gave out a password, PIN or passcode, ask them to change your security details and check recent transactions together. If you moved money to a criminal’s account, ask what options exist; our article on authorised push payment scams explains when you were tricked into sending money yourself and what refund rights apply.

If you downloaded software or gave someone access to your device, say so when you contact your bank, because the device may no longer be secure.

How Do You Report a Suspected Impersonation Call?

In England, Wales and Northern Ireland, report fraud to Action Fraud on 0300 123 2040 or through its website. In Scotland, report to Police Scotland on 101, or contact Advice Direct Scotland on 0808 164 6000. Tell your bank as well, even if you lost nothing, because reports help banks and regulators warn other customers. The FCA also asks people to report fake communications through its website so it can publish what it knows.

Next steps

• Contactless Cards and Mobile Wallets: How Secure Are They? explains how everyday card and phone payments are protected, and what happens if something goes wrong.
• The Real Cost of Online Purchase Scams covers what happens when a purchase turns out to be fake, and the routes back to your money.

Questions readers ask