How to Confirm If a Bank Caller Is Legit

Published: 

February 18, 2026

• 

8

 min read

• 

By 

Patrick Coughlin

iphone and android phones showing 'scam likely' and 'suspected scam' warnings on phonecalls

Why Bank Impersonation Scams Are So Convincing

Receiving a call that appears to come from your bank feels different from most scam calls. The number matches. The caller may know your name, your city, even the last four digits of your account. The urgency they create, often involving suspicious account activity or an attempted fraudulent transfer, is precisely the kind of scenario your bank would actually call about.

That's what makes it so difficult. Bank impersonation scams are built around trust. The FTC reported that bank impersonation was the most common form of impersonation fraud in 2024, with consumers losing over $1 billion to scammers pretending to be financial institutions. Caller ID spoofing technology makes it trivially easy to display any number, including your bank's legitimate fraud line, while placing a call from anywhere in the world.

Knowing how to verify bank callers before sharing any information or taking any action is one of the most important fraud-prevention skills you can have.

What a Legitimate Bank Call Actually Looks Like

Before you can spot a fake, it helps to understand what genuine bank calls do and don't involve. Real bank fraud calls do happen. Banks do call customers when they detect unusual activity on an account. But there are consistent patterns that distinguish legitimate outreach from a scam.

What Your Bank Will Do

  • Identify themselves with the bank's name and a general department (e.g., "This is the fraud prevention team at First National Bank")
  • Ask you to confirm your identity by verifying information you already have on file, rather than asking you to provide new sensitive data
  • Be comfortable if you say you'd like to hang up and call back through the number on your card or statement
  • Tell you to verify specific recent transactions and confirm whether you authorized them

What Your Bank Will Never Do

  • Ask for your full PIN, password, or online banking login credentials
  • Ask you to read back a one-time passcode sent to your phone (this is a sign-in code that gives the caller access to your account)
  • Ask you to transfer money to a "safe account" to protect it from fraud
  • Ask you to withdraw cash and hand it to a courier or deposit it into a Bitcoin ATM
  • Pressure you to stay on the phone and warn you not to call them back
  • Tell you that bank employees are involved in the fraud and that you should keep the call secret

How to Verify a Bank Caller: Step by Step

The safest way to handle any unexpected call claiming to be from your bank is to hang up and call back. This single step eliminates virtually all bank impersonation scam risk because you initiate the call yourself through a verified number.

Step 1: Don't Rely on Caller ID

Caller ID can be faked. A call that displays your bank's exact name and number may still be a scam. Caller ID spoofing is inexpensive and widely used by fraudsters specifically because people trust it. The number showing on your screen is not verification of anything.

Step 2: Don't Give Any Information During the Call

If you receive an unexpected call from someone claiming to be your bank, don't provide any personal or account information while on that call. It is safe to say: "I'd like to verify this call. I'm going to hang up and call the number on the back of my card." A legitimate bank representative will have no objection to this.

Step 3: Check the Phone Number Before You Call Back

Before calling back, look up the number independently. Don't redial the number that called you, as that will connect you to the scammer. Instead, use the number printed on the back of your debit or credit card, your bank's official website, or a tool like Scamwise to check whether the number that called you has been flagged for scam activity. This safe caller check takes about 15 seconds and can immediately confirm or contradict the legitimacy of the number.

Step 4: Call Your Bank Directly Using a Verified Number

Call the number on the back of your card or on your bank's official website and explain that you received a call you'd like to verify. Your bank's fraud team can tell you whether the call was legitimate and what, if anything, needs your attention. If the original call was real, calling back this way is just as effective. If it was a scam, you've protected yourself completely.

Red Flags That the Bank Caller May Be a Scammer

These warning signs should prompt you to end the call immediately and verify bank callers through official channels before doing anything else:

  • The caller creates urgency and says you must act right now to prevent your money from being stolen
  • The caller asks you to read back a code sent to your phone via text message
  • The caller asks you to transfer money, withdraw cash, or move funds to protect them
  • The caller asks for your online banking username, password, or full account number
  • The caller tells you not to tell anyone about the call, including other bank employees or family members
  • The caller becomes aggressive or dismissive when you say you'd like to hang up and call back
  • The caller mentions a bank employee being involved in fraud and claims this is why you can't contact the bank directly

Real-World Scenarios: Recognizing a Bank Impersonator

Scenario 1: The "Safe Account" Transfer

Barbara, 68, receives a call from a number she recognizes as her bank's fraud line. The caller says her account has been compromised by an internal employee and that to protect her funds, she needs to transfer everything to a temporary "safe account" the bank has set up for her. He stresses that she shouldn't tell anyone because the fraud involves bank staff.

Barbara pauses. She knows her bank would never ask her to transfer money to protect it. She tells the caller she'd like to hang up and call the number on her card. The caller becomes frustrated and warns her not to call the bank. She hangs up anyway, calls her bank directly, and confirms no such request exists. The call was a scam.

Scenario 2: The One-Time Code Request

James receives a call that appears to come from his bank. The caller confirms his name and the last four digits of his account and says they've detected unusual login attempts. To verify his identity and stop the intrusion, they'll send a code to his phone that he should read back.

James's phone buzzes with a text from what looks like his bank. The caller asks for the six-digit code. James hesitates, recalling that his bank had warned him never to share these codes with anyone. He declines, hangs up, and checks his account directly through the app. There is no unusual activity. The caller was attempting to use the code to reset his online banking password and access his account.

Why It's Hard to Hang Up (and Why You Should Anyway)

Bank impersonation scams work partly because of how we're wired. When someone tells us our money is in danger, the brain shifts into a threat-response mode that prioritizes fast action over careful thought. Scammers exploit this deliberately. They are trained to keep you in a state of low-grade panic throughout the call, giving you just enough information to seem credible and just enough fear to prevent you from slowing down.

The most effective counter to this is a simple, practiced response: "I'm going to hang up and call the number on my card." Saying this out loud, even to yourself, creates a pause that lets the logical part of your brain re-engage. A scammer's reaction to this sentence tells you almost everything you need to know. A real bank representative will agree immediately. A scammer will resist.

It can feel rude to hang up on someone who sounds professional and urgent. It isn't. Hanging up to verify is the right thing to do every time, regardless of how convincing the caller seems.

What to Do If You Fell for a Bank Impersonation Scam

If you provided information or sent money to someone you now believe was impersonating your bank, take these steps immediately:

  1. Call your bank using the number on the back of your card and report what happened. Ask them to freeze your account, reverse any unauthorized transfers if possible, and change your online banking credentials.
  2. Change your online banking password and PIN immediately if you shared them. Also change the password on any email account linked to your bank login.
  3. Place a fraud alert with the credit bureaus (Equifax, Experian, TransUnion) if you believe your personal information was compromised. A credit freeze is also an option and is free.
  4. Report the scam to the FTC at ReportFraud.ftc.gov. If wire transfer fraud occurred, also file a report with the FBI at ic3.gov.
  5. If you sent a wire transfer, contact your bank immediately to request a wire recall. Wire recalls are not guaranteed, but they have a higher chance of success the sooner they are initiated, often within the first 24 to 72 hours.
  6. If you sent cash, a money order, or a gift card, contact the issuing company immediately. Recovery is unlikely but worth attempting.

How to Protect Yourself from Bank Impersonation Calls

  • Practice the hang-up habit. Decide now, before you receive a suspicious call, that you will always hang up and call back using the number on your card when something feels off. Having this as a preset response removes the pressure of deciding in the moment.
  • Save your bank's real phone number in your contacts so you always know exactly where to call.
  • Run a safe caller check on unfamiliar numbers before engaging. Tools like Scamwise let you look up any phone number against known fraud reports in seconds.
  • Set up account alerts with your bank so you receive real-time notifications for transactions, logins, and password changes. This helps you catch unauthorized activity without relying on incoming calls.
  • Never share one-time codes with anyone who calls you, even if the call appears to come from your bank. This is one of the most common account takeover techniques used today.
  • Talk to older family members about bank impersonation scams. Adults over 60 are disproportionately targeted by these attacks, and the AARP Fraud Watch Network offers a free helpline at 1-877-908-3360.

Check Any Number Before You Call Back

If you've received a call from a number claiming to be your bank and you're not sure whether it's real, look up the number before you do anything else. Scamwise is a free tool that checks any phone number against known scam reports in seconds. It's the fastest safe caller check available and takes less time than waiting on hold with your bank. Enter the number, see what comes up, and know whether it's safe to engage before you say another word.

Check any number before you call back

Check a Number Free

About the Author

Patrick Coughlin

Patrick Coughlin is a cybersecurity and technology expert with over two decades of hands-on experience at the intersection of technology, intelligence, and security. He has built teams, products and companies to protect governments and Fortune 500 enterprises from the most sophisticated cyber threats. When his mother was targeted with an AI-powered impersonation scam, the threat became personal. His debut book, Dark Side of the Boom, reveals the human cost of the growing AI-powered scam economy, explores the organized criminal networks and black-market engines that power it and offers clear-eyed strategies for how to better prepare and protect ourselves and our communities. Patrick is the co-founder and CEO of Savi Security and lives in Los Angeles with his wife, son and dog.

Related Articles

Can You Get Your Money Back After a Scam?

Getting scammed is devastating — but recovery may be possible. Whether you paid by credit card, wire transfer, gift card, or payment app, your options are different. Here's what to do right away and how reporting to the FTC can sometimes lead to real refunds.

4 min read

Something feel off? Check it with Scamwise.

Upload any suspicious message for a free, instant scam check.

Try Scamwise — it's free
image of people interacting with devices (for a consumer apps)