Many people picture bank fraud as a hacker breaking into a system. In reality, the most common attacks target the person, not the technology. Criminals use fear, urgency and trust to persuade people to hand over codes or send money themselves. Once you know the patterns, these scams become much easier to spot. This guide explains the most common ones and the simple habits that defeat them.
Last updated: October 2026. Scam tactics change quickly, but the warning signs stay similar. This is general information.
This article is part of our full series on protecting your bank account from hackers.
The big idea: urgency plus authority
Almost every bank scam combines two things. First, a claim of authority: the caller says they are from your bank, the police, a delivery firm, or a government agency. Second, pressure: there is a problem and you must act immediately. The pressure is designed to stop you from thinking clearly or checking independently. Whenever you feel rushed, that is the moment to stop.
1. Fake bank fraud-team calls
You receive a call, and the person says they are from your bank’s fraud department. They may know some of your details, and the number may even appear to match your bank’s real number, because criminals can fake caller ID. They tell you your account is under attack and ask you to confirm codes, install an app, or move your money to protect it.
What to do: Hang up. Call your bank back using the number on the back of your card or on its official website. If possible, use a different phone, or wait a few minutes and make sure the line is clear before you dial, because scammers can sometimes keep a line open.
2. “Safe account” requests
This is one of the most damaging scams. You are told your money is at risk and you must transfer it to a “safe account” that the caller provides. The account belongs to the criminal.
The rule: No genuine bank will ever ask you to move money to a safe account. If you hear those words, it is a scam.
3. Phishing emails and text messages
A message arrives claiming to be from your bank, a courier, a tax authority or a streaming service. It might say there is a problem with your account, a missed delivery, or a refund waiting. A link takes you to a copycat website that steals your login details and any codes you enter.
What to do: Do not click links in unexpected messages. Open your bank’s official app or type its web address yourself. Check the sender’s details carefully, but remember that even real-looking messages can be fake.
4. Remote access scams
Someone persuades you to install a screen-sharing or remote access app, perhaps claiming to fix a computer problem or to help with a refund. Once connected, they can see your screen and operate your device, including your banking app.
What to do: Never install software or grant remote access at the request of someone who contacted you. If you already have, disconnect from the internet, uninstall the app, and call your bank.
5. Fake investment opportunities
Criminals promote investments that promise high or guaranteed returns, often through social media ads, messaging apps or fake websites. Early “profits” may appear to build trust, and then larger payments are demanded. Cryptocurrency is frequently involved.
What to do: Be sceptical of guaranteed returns and pressure to invest quickly. Check that any firm is authorised by your country’s financial regulator before you send money.
6. Impersonation of family or friends
A message arrives from an unknown number saying “Hi Mum, I’ve lost my phone,” and soon asks for money. Criminals also use cloned voices or hijacked messaging accounts to appear convincing.
What to do: Contact the person on a number you already know, or agree a family code word that you can use to confirm identity in an emergency.
7. Romance scams
A criminal builds a relationship online over weeks or months, then invents a crisis that requires money. They typically avoid video calls and move quickly to emotional or financial requests.
What to do: Never send money to someone you have not met in person, however close you feel.
8. Marketplace and overpayment scams
When you sell something online, a “buyer” sends too much money, or a fake payment confirmation, and asks you to refund the difference. The original payment later bounces or never existed.
What to do: Check that money has actually cleared in your own account, not just that you received an email, before you send anything back.
9. QR code and fake website tricks
Criminals place stickers over genuine QR codes, or send codes by message or email that lead to fake login pages or payment pages.
What to do: Be careful scanning codes in public places, and check the web address that appears before you enter any details.
Warning signs that something is a scam
- You are told to act now or something bad will happen
- You are asked to keep the conversation secret, including from your bank
- You are asked to move money to a “safe” or “special” account
- You are asked for a one-time code, PIN or full password
- Someone wants you to install an app or give remote access
- You are asked to pay in gift cards or cryptocurrency
- The deal seems too good to be true
The simple habits that beat nearly every scam
- Pause. Real banks do not mind if you take a minute to check.
- Hang up and call back on an official number you look up yourself.
- Never share codes or passwords with anyone, ever.
- Never move money because someone on the phone tells you to.
- Talk to someone you trust before sending a large payment, especially if you feel pressured.
- Use strong login protection like those in our guide to two-factor authentication and passkeys.
What if you have already been scammed?
Act as fast as possible. Contact your bank immediately, explain exactly what happened, and ask whether the payment can be stopped or recalled. Then follow the steps in our guide on what to do if your bank account is hacked. Do not feel embarrassed. These scams are designed by professionals, and they catch smart, careful people every day.
Frequently asked questions
How can I tell if a call from my bank is real?
Do not rely on the caller ID. Hang up and phone the number on the back of your card or on the bank’s official website.
Will my bank ever ask me to move money to a safe account?
No. This is one of the clearest signs of a scam.
Can scammers fake my bank’s phone number?
Yes. Caller ID can be spoofed, so a number that looks right is not proof that a call is genuine.
Will I get my money back if I send it to a scammer?
It depends on your country, your bank and how the payment was made. In some places, such as the UK, many bank transfer scam victims are reimbursed under mandatory rules, but you must report quickly. Contact your bank immediately.
What should I do with a suspicious message?
Do not click anything. Delete it, or report it using your phone or email provider’s reporting tools, and contact your bank through official channels if you are worried.
You do not need to be a security expert to stay safe. Slow down, verify independently, and never move money or share codes under pressure, and you will defeat the large majority of scams.
