Scams & Fraud

A Bank Fraud Call Is Not Proof: Hang Up and Verify

By Maren Hale / November 10, 2026

A Call From Your Bank's Fraud Department Is Not Proof: Hang Up and Verify

Quick answer: A call or text that says it is from your bank’s fraud department is not proof of anything, even if the number on your screen looks right. Caller ID can be faked, and the whole routine is built to rush you. Do not share a code, do not move money, and do not install anything. Hang up, then reach your bank yourself through the number on your card, your statement, or the bank’s own app or website. If you already did something, call the bank’s real number now, because speed is the one thing that helps.

Key takeaways

A familiar number on your screen proves nothing. The FTC says not to rely on caller ID to decide who is calling.
Real fraud teams do not ask you to move your money to “protect” it. U.S. consumer agencies say this plainly and repeatedly.
Never read out a verification code. The FTC’s rule is that anyone who asks for it is a scammer.
The safe move is boring: hang up and contact the bank through details you already trust, not the ones the caller or text gave you.
If you already acted, tell your bank right away, then report to the FTC and the FBI’s Internet Crime Complaint Center.

Why the number on your screen does not settle it

Picture the setup. Your phone buzzes, the screen shows what looks like your bank, and a calm voice says it is the fraud department. Your brain does the math: real name, real number, probably legit. That shortcut is exactly what the caller is counting on.

The FTC explains that scammers use fake caller ID information to look local or trustworthy, posing as a government agency, a bank, or another business you recognize. A separate FTC alert about bank fraud calls adds that these callers may use your bank’s name and even its fraud-department number. They may also know details about you and sound sympathetic, so knowing your name proves nothing.

The story often starts with a text. The FDIC notes that scam texts frequently look like bank security alerts, such as a message about a large purchase you did not make. If you reply, the follow-up can be a call from someone posing as the bank’s fraud department. Treat the text and the call as one operation.

The pattern: what the story usually looks like

Details change, but the shape stays recognizable. Here is what to watch for.

Urgency. You must act right now. The FTC lists urgency as a warning sign, and the FCC says these scams often pressure people to act immediately. A real problem can wait the two minutes it takes you to call back.
“Your account is compromised.” The fear hook. The FTC describes callers claiming there is fraud or criminal activity on a bank, investment, or retirement account, so the caller can look like your protector.
A “safe account” or protective transfer. This is where a scare turns into a loss. The FTC describes versions involving a transfer to a supposedly safer account, a cash withdrawal, cryptocurrency, or gold, and lists gift cards and cryptocurrency ATMs among the warning signs. The FTC says your money is safe where it is. The CFPB adds that real financial institutions do not ask you to send money to protect it.
A request for a one-time code. The code your bank sends is a second lock on top of your password. The FTC compares it to a deadbolt on a door that already has a regular lock. With your code, a scammer can move money out of savings or investment accounts.
Remote access. Some versions ask you to install software so a “team” can look at your device. The FTC says scammers ask for remote access and pretend to scan for problems, and it advises never giving control of your computer to someone who contacts you unexpectedly.
Stay on the line, keep it quiet. The FTC points to callers who keep you on the phone, even while you go to the bank in person, and who tell you to give a false reason if anyone asks why you are moving money. The ABA’s consumer campaign also lists being asked to keep a request secret as a sign.

What a real bank does instead

No institution can promise it will never phone you, so do not memorize a “banks never call” rule. Memorize the requests that should end the conversation. As of November 2026, federal agencies and the banking industry line up on these:

Moving money to protect it. The FCC says banks will never call or text and ask you to move your money to protect it.
Account details by email or text. The CFPB says banks and credit unions never ask for account information through email or text message.
Verification codes. The FTC says no caller, including one claiming to be from a fraud department, needs your code.
Pressure and secrecy. The ABA’s Banks Never Ask That campaign lists secrecy and pressure to log in or send money as signs of a scam.

How banks notify customers varies by bank, so judge the request, not the sender. If a message gives you something to check on your own, in your own app, you are in good shape. If it asks you to act inside the message, the call, or a link, treat it as unverified.

Red flags at a glance

What they say or do	Why it is a red flag	What to do
Calls or texts out of the blue about “suspicious activity”	Scam texts often mimic bank alerts, and a reply can lead to a call from a fake fraud department.	Do not reply or tap links. Check the account in your own app.
The caller ID shows your bank’s name or number	Caller ID can be faked, so it proves nothing.	Hang up and call the number on your card or statement.
“Your money is at risk, move it now”	Banks do not ask you to move money to protect it.	Do not transfer, withdraw, or buy anything. Tell your bank.
“Read me the code we just sent”	The code is the second lock on your account. Anyone asking for it is a scammer, per the FTC.	Never share it. Hang up, and check your account for sign-in attempts.
“Install this so we can check your device”	Remote access hands over control of your device and accounts.	Decline. Contact your bank through a number you trust.
“Stay on the line” or “do not tell the teller why”	It stops you from checking with anyone who could stop it.	End the call and talk to someone you trust.
“Call this number to reach the real team”	A number supplied by the sender leads back to the sender.	Use a number you found yourself, such as the one on your card.

The hang-up-and-verify routine

The FTC, FDIC, and CFPB all land on the same step: contact the bank using a number from a source you already trust.

End the call. You do not owe the caller an explanation. If it was a text, do not reply.
Find the number yourself. Use the back of your card, a statement, or the bank’s official app or website. The FTC says to avoid the number the caller gave you.
Ask what is actually going on. If there is a real problem, the bank can see it. If not, you have your answer.
Check from your own screen. Open the app you installed yourself, or type the bank’s web address into your browser. The FDIC advises comparing a bank’s name with its web address, since fake sites use look-alike addresses.
Report the attempt at ReportFraud.ftc.gov. The FTC says reports help it spot trends and build cases.

If you already acted: the first hour

Feeling silly is not useful right now. The FTC itself says to act quickly. Work through this in order.

Call your bank on its real number. Tell them you may have been scammed, especially if you moved money or shared a code.
Ask for a reversal or refund. The FTC’s recovery guidance says to ask your bank or credit union to reverse a bank transfer, to contact a card issuer using the number on the card, and to report a payment-app payment to the app. Cryptocurrency has fewer protections, but contact the exchange or ATM operator anyway.
Ask about the card and account. Ask what the bank can do to protect what you used, such as replacing a card number. Options vary by bank.
Change passwords and turn on two-factor authentication. Start with your bank and email, then any account that shared the same password.
If you gave remote access, the FTC says to update your security software, run a full scan, and change your passwords. For help, contact the device maker or a trusted tech company.
Report it. File at ReportFraud.ftc.gov. The CFPB also lists the FBI’s Internet Crime Complaint Center at ic3.gov, your state attorney general, and local police. If personal information was used, the FTC points to IdentityTheft.gov for a recovery plan.

One honest caveat from the FTC: bank accounts have fewer protections than credit cards, so money sent in a scam is not always recoverable. The IC3 also says it does not work with outside parties such as law firms or crypto services to recover lost funds, so be wary of anyone offering to get your money back for a fee.

A quick checklist to keep on your phone

I treat any “fraud department” call or text as unverified until I have called back myself.
The number I use comes from my card, my statement, or my bank’s official app or website.
I do not read out or type in a code for anyone who contacted me.
I do not move, withdraw, or convert money because a caller said to.
I do not install software or give remote access to someone who contacted me.
If I feel rushed, that is my cue to hang up.

Frequently asked questions

Can my bank’s real phone number show up on a scam call?

Yes. The FTC says scammers fake caller ID to look like a bank or another trusted business. Treat the screen as a claim, not as proof.

What if the caller already knows my name or recent purchases?

That does not prove the call is real. The FTC notes that these callers may know details about you and use them to sound credible. Hang up and call the number on your card.

Is it ever okay to give a bank a verification code?

Only when you start the contact yourself, such as when you are logging in and the code appears on your own screen. If someone contacts you and asks for it, the FTC says that person is a scammer.

I hung up, but I am still not sure. What now?

Open your bank’s app and check your balance and recent activity yourself, then call the number on your card if anything looks off. To confirm a bank is real, the FDIC’s BankFind Suite lets you compare its name and web address.

Before you decide

You will probably get one of these calls eventually, so decide now how you will handle it. The answer is the same every time: hang up, find the number yourself, and never let a stranger set the pace. If you have already shared something, call your bank first and report second. Telling a friend afterward helps too, since the FTC encourages sharing these warnings.