What's actually going on
Bank impersonation is exactly what it sounds like: someone phones you pretending to be from your bank. Usually they'll say they're from the fraud department. They'll tell you there's been suspicious activity on your account and that you need to act fast to protect your money.
The thing is, these calls are often extremely convincing. The number on your caller ID might match your bank's genuine number. The caller might know your name, address, and the last four digits of your card. They will sound professional, calm, and concerned. Nothing like the stereotype of a dodgy phone scammer.
How they pull it off
Bank impersonation calls work because they exploit trust and urgency at the same time. The playbook is well-worn by now, but it still catches people out every day.
1. The spoofed number
They fake your caller ID so it looks like your bank is ringing. Some even spoof the number printed on the back of your debit card. This is cheap and straightforward for criminals to set up. The technology has been around for years.
Why caller ID can't be trusted
UK phone networks don't currently verify the number displayed to the person receiving a call. Ofcom is working on fixes, but right now, caller ID is trivially easy to fake.
2. They already have your details
Data breaches, dark web marketplaces, and social media all give fraudsters a head start. They might know your full name, address, date of birth, and partial card numbers before they even pick up the phone. That's what makes the call feel real.
Where they get your data
- • Previous data breaches (check yours at haveibeenpwned.com)
- • Details sold on dark web forums
- • Social media profiles and public records
- • Phishing emails you may have clicked on months ago
3. The pressure
Every bank impersonation call runs on urgency. They'll say someone is taking money from your account right now. They'll say you've got minutes to act. The whole point is to stop you thinking clearly, because the moment you pause and consider what's happening, the scam falls apart.
The manufactured panic
Fraudsters are trained to keep you on the phone and talking. If you try to hang up so you can ring your bank yourself, they'll say the fraud is happening right now and that hanging up will make things worse. This is always a lie.
4. The "safe account"
This is the punchline. After convincing you your money is at risk, they ask you to transfer it to a "safe account" or a "holding account" while they sort things out. That account belongs to the criminals. Once the money lands, it gets moved on within minutes and is extremely hard to recover.
What the call sounds like
A few standard scripts are doing the rounds. The specifics change, but the shape of the call is always the same.
"Suspicious transaction"
They say they've spotted an unusual payment, typically for a few hundred quid, and ask if you recognise it. When you say no, they use that as the hook to walk you through "securing" your account.
"We've detected a payment of £347 to an online retailer. Can you confirm whether this was you?"
"Account compromised"
They tell you someone has accessed your online banking and your account is at risk. They'll ask you to log in and "verify" things, while actually watching or recording what you type.
"We believe a third party has gained access to your online banking. I need to take you through some security steps right now."
"Install this app"
A newer angle. They ask you to install a "security app" or screen-sharing tool on your phone. This gives them direct access to see your screen, including your banking app and any one-time passcodes that come through.
"For your protection, I'll need you to download our security verification app. It's in the App Store."
"Corrupt staff member"
They tell you a member of bank staff is stealing from accounts and they need your help to catch them. They'll say it's confidential and you mustn't mention it to anyone at the branch. This cuts you off from the people who'd spot the scam in seconds.
"This is a confidential investigation. Please don't discuss this with anyone at your local branch as we're not sure who's involved."
Why smart people get caught
There's a widespread assumption that only gullible or elderly people fall for phone scams. It's wrong, and it's a dangerous thing to believe, because it makes you think it couldn't happen to you.
Bank impersonation fraud catches out doctors, accountants, IT professionals, and everyone in between. The people running these scams are good at what they do. They train for it. They have scripts refined over thousands of calls, and they know exactly how to keep someone on the line and compliant.
What they exploit
- • Fear of losing money triggers a panic response
- • Authority bias: we tend to comply with "officials"
- • The spoofed number matches what you'd expect to see
- • They know details only your bank should know
- • Time pressure stops you from verifying anything
What breaks the spell
- • Hanging up and ringing back on a number you trust
- • Telling someone else what's happening
- • Remembering that a real bank will never rush you
- • Asking: "Would my bank actually ask me to do this?"
- • Simply pausing for 30 seconds before doing anything
What your bank will never ask you to do
Every major UK bank has confirmed they will never do the following over the phone. If someone claiming to be your bank does any of these, hang up.
Ask for your full PIN or online banking password
Ask you to transfer money to a "safe" or "holding" account
Tell you to install screen-sharing or remote access software
Send a courier round to collect your card or cash
Pressure you to act immediately without time to think
Ask you to keep the call secret from family or branch staff
Ask you to withdraw cash and hand it to someone
Tell you to lie to branch staff about why you're withdrawing money
If you get one of these calls
Stop and hang up
It doesn't matter how convincing they sound or how urgent they say it is. Put the phone down. A real bank won't mind. They'd expect you to be cautious.
Wait five minutes
On a landline, the scammer can actually hold the line open even after you've hung up. Wait at least five minutes, or use a different phone entirely (your mobile if you were called on a landline, or the other way around).
Ring your bank yourself
Use the number on the back of your debit card or on your bank's official website. Don't call back the number that rang you. You can also dial 159, the Stop Scams UK number, which connects you to your bank's fraud team directly.
159 is a universal number supported by most major UK banks. It routes straight through to your bank's genuine fraud department.
Tell someone
Scams work best when you're isolated. Tell a partner, family member, or friend what just happened. Saying it out loud often makes the red flags blindingly obvious in a way they weren't during the call itself.
Report it
Even if you didn't lose money, reporting the call helps build a picture of active scam operations and gets numbers blocked at network level.
Already sent money?
Act fast. The sooner you report it, the better your chances of getting money back.
-
1
Ring your bank immediately
Call the number on your card or dial 159. Tell them you've been the victim of fraud. They can freeze outgoing payments and try to claw back funds from the receiving bank.
-
2
Report to Action Fraud
Call 0300 123 2040 or report online. You'll get a crime reference number, which you'll need if you make a reimbursement claim later.
-
3
Change your passwords and PINs
If you shared any login details or PINs during the call, change them straight away. Check your other accounts as well. Most people reuse passwords whether they admit it or not.
-
4
Ask about reimbursement
Under the Payment Systems Regulator's APP fraud rules, your bank may be required to refund you. This applies to most payment providers in the UK. Ask your bank about it directly. If they refuse, take it to the Financial Ombudsman.
The short version
Red flags
- • Unexpected call claiming to be your bank
- • Urgency or pressure to act right now
- • Asked to move money anywhere at all
- • Told to keep the call a secret
- • Asked for PINs, passwords, or one-time codes
What to do
- • Hang up without hesitation
- • Wait five minutes, then ring your bank
- • Dial 159 to reach your bank's fraud team
- • Tell someone you trust what happened
- • Report to Action Fraud (0300 123 2040)