The phone rings and the person on the other end says they are from your bank's fraud team. They sound calm and professional. They tell you someone has just tried to take money from your account, or that a card payment in another city has been flagged. They want to help you stop it before any more damage is done.
It feels real. The number on your screen may even match the one printed on the back of your card. But this is a well-documented scam in the UK, and people lose serious sums of money to it every week.
How the call usually goes
The pattern is fairly consistent. The caller creates urgency, then steers you toward an action that empties your account. You may hear some version of the following:
- "We've spotted suspicious activity on your account. Did you authorise a payment of £849 to an online retailer a few minutes ago?"
- "To protect your money, we need to move it to a safe account in your name while we investigate."
- "I'm sending a one-time code to your phone now. Please read it back to me so I can verify it's really you."
- "Don't tell anyone in the branch, as we suspect a member of staff may be involved."
Some callers will ask you to install remote access software so they can "secure" your device. Others will ask you to withdraw cash and hand it to a courier, or to buy gift cards. The most damaging version is the one where you are persuaded to transfer your own money to an account the scammer controls, believing it to be a safe holding account set up by the bank.
The number showing on your phone is not proof of anything. Scammers can spoof caller ID so it displays the real bank's number, a UK landline, or anything else they choose. Ofcom and the telecoms industry have been working on the problem, but spoofing still happens.
What a real bank will never do
UK banks generally state that they will not ask you to:
- Move money to another account, including one described as "safe", "holding" or "secure".
- Read out a one-time passcode, PIN or full password.
- Hand cash or cards to a courier.
- Buy gift vouchers to pay off a fraudster or settle a fee.
- Install remote access software so they can take control of your computer.
If anyone on the phone asks you to do any of these things, the call is a scam. It does not matter how convincing they sound, how much they seem to know about you, or how worried they make you feel. Hang up.
The safest way to check is to end the call, wait a few minutes, then ring your bank back using the number printed on the back of your debit or credit card. You can also use the number on your bank's official website or in the banking app.
Waiting matters because scammers sometimes stay on the line after you think you have hung up, then pretend to be the bank when you "call back". On a mobile this is less of a risk, but giving it a couple of minutes, or using a different phone, removes any doubt. Many UK banks also support the 159 service, which connects you directly to your bank's fraud line, though not every provider has signed up, so it is worth checking whether yours has.
If you have already shared information or moved money, contact your bank straight away. Time matters. The sooner the bank knows, the better the chance of recovering funds or stopping further payments.

Got a text, call, email or offer that feels off? Paste it in below and we will tell you how scammy it looks, the warning signs to spot, and exactly what to do next.
Try our Scam Detector free, here on this site →Reporting and getting your money back
Scams of this kind should be reported to Action Fraud, either online at actionfraud.police.uk or by phone on 0300 123 2040. In Scotland, report to Police Scotland on 101. Reports help build a picture of how these gangs operate, even when individual cases are not investigated.
If you transferred money yourself because you were tricked, this is known as Authorised Push Payment (APP) fraud. New rules from the Payment Systems Regulator, which took effect on 7 October 2024, require most UK banks and payment firms to reimburse APP fraud victims, with the cost shared between the sending and receiving firms. There are limits, exclusions, and in many cases a small claim excess, and you are expected to have acted with reasonable care. Before those rules came in, many banks reimbursed under the voluntary Contingent Reimbursement Model Code, which still informs how older cases are handled.
If your bank refuses to reimburse you and you think the decision is unfair, you can take the complaint to the Financial Ombudsman Service. Citizens Advice can help you put the complaint together if you are not sure where to start. For wider concerns about how a firm has treated you, the FCA's consumer helpline can also point you in the right direction.
Your situation may be slightly different. ask a question below ↓ and our editorial team will reply with our advice.
A few practical habits
You cannot stop scammers from ringing, but you can make yourself harder to rush.
- Treat any unexpected call about your money with suspicion, no matter who it claims to be from.
- Never act on instructions given during an incoming call. Hang up and verify.
- Keep the number on the back of your card somewhere you can find it quickly.
- Talk to someone you trust before moving money in a hurry. Scammers rely on isolation and pressure.
- If you live with or care for an older relative, have the conversation about this scam before it happens.
The fraud team call works because it borrows the language and tone of the very people who are supposed to protect you. Once you know the shape of it, the script becomes easier to spot. Slow down, put the phone down, and ring back on a number you trust.
Related warnings
- The Hi Mum WhatsApp Scam
- Voice Cloning Phone Scams
- SIM Swap Fraud
- Authorised Push Payment Fraud and Your Refund Rights
See more recent scams on the Latest Scam Warnings page.
Ask Safe from Scams a question
Ask our editorial team a question and we will reply with our advice. Tell us as much about your situation as you can: the more detail you give, the more useful our answer can be.
You do not need to use your real name. Please do not include your full address, phone number, email address, or the names of other people. We may edit or remove identifying details for privacy and legal reasons.
Comments are moderated before publication.