Banking and financial institution scams
Bank impersonation scams work because the caller sounds like they are protecting you. The instruction that gives them away is the one asking you to move your own money.
What it is
A bank scam is contact from someone claiming to be your bank's fraud team, saying your account is under attack. The framing is not a threat. It is help.
That inversion is what makes this category the most costly per victim in the entire set. Every other scam asks you to send money to a stranger. This one asks you to protect your money by moving it somewhere safe, and the safe place is theirs. You authorise the transfer yourself, from your own device, calmly, believing you are following your bank's instructions.
Because you authorised it, recovery is harder and slower than for a stolen card. In the industry this is called authorised push payment fraud, and it is the reason banks are now under regulatory pressure to intervene before the money moves.
How it starts
A text first, often. A short message about a payment you do not recognise, asking you to reply YES or NO. You reply NO, and a phone call follows within seconds, which makes the call feel like a response to you rather than an approach.
Or a call directly, with caller ID showing your bank's real number, which is trivially spoofed.
The person on the other end is calm, competent and unhurried. They know your name, sometimes the last four digits of your card, sometimes a recent genuine transaction, all of which is obtainable from breach data or from a previous phishing page you visited.
Then the story: fraudulent activity has been detected, an insider at the bank is suspected, your account has been compromised. The resolution is to move your balance to a new "safe account" they will set up, or to confirm a code, or to install software so they can secure the device.
Why it works
The caller is on your side. There is no threat and no demand. There is concern, and a procedure. Suspicion is disarmed by the absence of the thing you were told to watch for.
They already know things about you. Data breaches have made a plausible opening cheap. One true detail makes everything after it feel verified.
The one-time code is reframed. You have been told never to share codes, so a good script does not ask you to share one. It asks you to read one back "to confirm the line is secure", or tells you to expect a code and to ignore its wording, or asks you to approve a push notification. The code is your bank's last defence and the script is written specifically to get past it.
Isolation is operational. You will be told to stay on the line during the transfer, and coached on what to say if the bank asks about the payment. The FBI has warned publicly about scammers coaching victims to evade bank security. If someone tells you what to say to your own bank, that is the answer.
The money moves at your hand. No system flags a customer moving their own money in a pattern the customer has just been talked through.
How to spot it
You are asked to move money to a new account for safety. No bank does this. There is no such thing as a safe account
You are asked to read out, type or approve a one-time code, for any reason
You are told to stay on the line while you act
You are coached on what to tell bank staff, or told not to mention the call
You are asked to install remote access or support software
Caller ID shows the bank, which proves nothing
The call followed a text you replied to
You are asked to withdraw cash, buy gold, or hand anything to a courier
Any urgency at all. A real fraud team can freeze the account and call you back
What to do
Hang up and call back on the number on your card. Wait five minutes or use a different phone, since a held line can be a real risk on landlines. Any legitimate call survives being called back.
Never move money on instruction from an inbound call. There is no scenario where that is correct.
If you have already transferred. Call your bank on the card number now and use the words "I was tricked into authorising this payment". Speed decides whether the receiving account can be frozen. Ask them to send a recall request to the receiving bank. Then report to the FBI's IC3 at ic3.gov and the FTC at reportfraud.ftc.gov.
If you installed software or gave remote access. Disconnect the device from the internet, then call the bank from a different device. Assume anything visible on that screen has been seen.
This is the scam that catches careful people. Falling for a competent impersonation of your own bank's fraud team is not carelessness. The script is built to survive exactly the caution you were told to have.
---
Have this emailed to you
Send yourself this page so you can forward it, or read it later when you are not standing in a shop.
Email it to myselfPaste a text, email or direct message
A text, an email or a chat message. Take out names and account numbers first.
Add a screenshot
Check it
No account needed.
What happens to your message
Checking the message now. Stay on this page.
Flggd could not check this message just now. Try again in a moment, or use the Flggd app.
Try again
Flggd could not read this image, so it has not been checked. This is not a verdict. Try a clearer screenshot, or paste the text instead.
Paste a message or add a screenshot first.
Text Submission
Image Submission
Flggd Verdict
Scam
Red flag
High confidence of a scam. The content, the sender, the intent and where its requests lead all point the same way. Do not reply, click, call or pay.
Likely to be a scam
Yellow flag
It asks you to act: a link, a number, a reply or a payment. Where that request leads is where the harm starts.
Looks normal
Green flag
High confidence this is normal. The content reads as expected, the sender has a safe history, and anything it asks leads somewhere legitimate. Accounts can be taken over, so if a request seems out of character, check again.
Likely to be a scam
Grey flag
Nothing is asked of you yet. The content, the sender or the intent do not add up. Scams like this start friendly and ask later.
This result could not be shown. Check the message again. If it happens twice, use the Flggd app instead.
Score
Scam type
Confidence
Why Flggd says this
What this message wants you to do
Has anything happened yet?
You do not have to answer. Nothing you tap here is sent or recorded, and the verdict above stands either way.
Change answer
Nothing has happened yet
Good. Checking first is the safest thing to do. Do not tap any link, reply, or call any number in the message. Block the sender and delete the message. If it claims to be from an organisation you know, contact them using details you already trust.
Change answer
You tapped a link
Opening a link does not usually take money or details on its own. The harm comes from what you do on the page it opens. If you entered nothing and installed nothing, close the page and do not go back to it. If it asked you to sign in, enter a code, or install something, and you did, choose Gave details instead.
Change answer
You gave details
Work through this in order. First, if you gave bank or card details, call your bank now on the number on your card. Next, change the password for any account you entered, and for any other account that uses the same password. If you shared a one-time code, tell the organisation it belongs to straight away. Then turn on two-step verification where you can, and watch your statements for anything you do not recognise.
Change answer
You sent money
Call your bank now, on the number on your card or in your banking app. Say: "I have been scammed and I need to stop a payment." The sooner they hear from you, the more they may be able to stop or recover. In the UK you can call 159 to reach your bank. Do not pay anyone who offers to get the money back. That is another scam.
Report it. US: ReportFraud.ftc.gov, and ic3.gov for online crime. UK: reportfraud.police.uk or 0300 123 2040; in Scotland, Police Scotland on 101. Australia: scamwatch.gov.au. Have ready the message, the sender's number or address, and any payment details.
What to do next
Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.
Do not reply, click any link, call any number in the message or send money. If it claims to be from an organisation you know, contact them using details you already trust.
No action needed. If the sender later asks for money, codes or personal details, check that message too.
Do not reply at all, not even to say wrong number. A reply tells them the number is live. Block the sender and delete the message. If a request follows, check it again.
Text read from your image
Your image
The closest scam in the Flggd library. Similar, not necessarily the same message.
How this scam works
The closest match is the scam described on this page.
Share this result
Email it to myself
Copied. Paste it anywhere to share it.
Could not copy. Select the text and copy it, or use Email it to myself.
Checked with Flggd at flggd.com
My Flggd verdict
Check the next one on your phone
The Flggd app checks texts, emails and screenshots wherever you are, and teaches you the warning signs as you go. Free on iPhone and Android.
Get the app
What Flggd does about this
Worried about someone else rather than yourself?
Helping someone else
