Disclosure: The article may contain affiliate links from partners who may compensate us. However, the words, opinions, and reviews are our own. Learn how we make money to support our mission.
Bank impersonation scams are scary because they often look like protection. You may receive a text, call, email, or voicemail claiming there is suspicious activity on your account. The person may sound professional, know part of your personal information, and tell you they are trying to “stop fraud.”
But the real goal is often to get your password, PIN, debit card number, one-time passcode, or money.
In this guide, you’ll learn how bank impersonation scams work, the warning signs to watch for, and what to do before you click, reply, transfer money, or share account information.
A bank impersonation scam happens when a scammer pretends to be from your bank, credit union, card issuer, or fraud department to trick you into sharing information or moving money.
These scams may come through:
The scammer may claim:
The FDIC warns that scammers may pretend to be from a bank and request personal information such as Social Security numbers, card numbers, bank account passwords, or other sensitive details. It also notes that bank impersonation scams have grown sharply through text messages in recent years.
👉 Compare: Identity Protection Tools in the Marketplace →
Your bank may contact you about suspicious activity, but scammers know this too. That is why fake fraud alerts are so common.
A scam text may say:
The message may even appear in the same thread as real bank alerts if scammers spoof the sender name or number.
What to do:
Do not click the link. Do not call the number in the message. Open your bank’s official app or call the number on the back of your debit or credit card.
Smile Money Tip: A real bank issue can be verified outside the message. You do not have to solve a fraud alert through the same text or call that scared you.
👉 Related: How to Protect Yourself From Phishing Scams →
This is one of the most important rules.
A real bank should not ask you to share your:
Scammers often ask for one-time codes because they are trying to log in as you. They may say the code is needed to reverse fraud, verify your identity, or stop a transaction. In reality, sharing the code may give them access to your account.
The FDIC Office of Inspector General warns that banks, companies, and government agencies will not call or send unsolicited messages asking for sensitive personal information, and high-pressure tactics are a common warning sign.
What to do:
If someone asks for a code, password, or PIN, stop. Hang up. Contact your bank directly using a trusted number.
This is one of the clearest signs of a scam.
A scammer may say your money is unsafe and needs to be moved to:
They may tell you the bank is investigating fraud internally, so you cannot tell anyone. They may even say bank employees are involved and you should lie about why you are withdrawing or transferring money.
The FTC is direct about this: if someone tells you to move or transfer your money to protect it, it could be a scam. The FTC says to ignore unexpected requests for money and verify the story using a phone number, website, or app you know is real.
What to do:
Do not transfer money. Hang up. Call your bank directly. If you are in a branch, tell a bank employee what happened.
👉 Related: How to Secure Your Financial Accounts From Fraud →
Scammers can spoof phone numbers. That means your phone may display your bank’s name or a number that looks official, even if the call is not really from your bank.
They may also know pieces of your information from data breaches, public records, stolen mail, or previous scams. Knowing your name, address, last four digits, or bank name does not prove they are legitimate.
What to do:
If a caller claims to be from your bank, say: “I’m going to call back using the number on my card.”
A real bank representative should understand. A scammer may pressure you to stay on the line.
Verification is your safest move.
Use one of these trusted methods:
Avoid:
Simple Example:
You get a text saying your checking account is frozen and you must call a number. Instead, you open the bank app and see no alert. Then you call the number on your debit card and confirm there is no problem. The text was a scam.
Bank impersonators often combine account fear with risky payment instructions.
Be suspicious if they ask you to:
The FTC says scammers may tell people to withdraw cash or buy gold and give it to someone, and that these “protect your money” instructions are scams.
What to do:
If the solution involves moving money under pressure, stop. A legitimate bank fraud department can help secure your account without asking you to send money to a stranger or secret account.
You can reduce your risk before scammers contact you.
Set up:
Also check your account regularly. You do not need to obsess over every transaction, but catching fraud early gives you more options.
If your bank or credit union offers a security word, voice ID, account nickname, or in-app message center, learn how those tools work.
If something feels suspicious:
If the scammer is on the phone, you do not need to explain. Just hang up.
Act quickly.
If you shared your password:
Change it immediately. If you used it elsewhere, change it there too.
If you shared a one-time code:
Contact your bank right away. Review account activity and remove unfamiliar devices.
If you sent money:
Call your bank’s fraud department immediately. Ask whether the transaction can be stopped, reversed, recalled, or disputed.
If you shared card information:
Ask whether the card should be locked or replaced.
If you gave remote access to your device:
Disconnect from the internet, remove remote access software, run a security scan, and change passwords from another device.
If your identity may be at risk:
Check your credit reports, place a fraud alert, and consider freezing your credit.
You can also report bank impersonation scams to the FTC at ReportFraud.ftc.gov.
Bank impersonation scams are designed to feel urgent and official. That is why your best move is to slow down and verify outside the message.
Yes, some banks send legitimate fraud alerts. But scammers copy those alerts. Do not click links or call numbers in unexpected messages. Open your bank app or call the number on your card.
You should not share one-time codes with someone who contacts you. A code may let a scammer log in, reset your password, or approve a transaction.
Yes. Caller ID can be spoofed. Always verify by calling the number on your card, statement, or official bank website.
That does not prove the call is real. Scammers may have partial information from breaches, stolen mail, or previous scams.
Call your bank immediately and ask whether the transaction can be stopped, reversed, recalled, or disputed. Save evidence and report the scam to the FTC.
Bank impersonation scams work because they make fear sound official. A calm voice, familiar logo, or spoofed phone number can make a scam feel real.
Your safest rule is simple: do not share codes, do not move money, and do not verify through the message that scared you. Contact your bank directly and take control of the moment.
Next Steps:
Share the knowledge: