November 13, 2026
When a Scammer Says They’re the “Bank Fraud Department”
Security
FDIC-Insured – Backed by the full faith and credit of the U.S. Government
FDIC-Insured – Backed by the full faith and credit of the U.S. Government
FDIC-Insured – Backed by the full faith and credit of the U.S. Government
A call about suspicious activity can immediately get your attention. Fraudsters use that reaction to make the next request feel legitimate.
Someone impersonating a bank employee may claim that your account has been compromised, reference a suspicious transaction, and then ask for a one-time passcode, online banking credentials or authorization to move money. The FBI warns that criminals increasingly impersonate financial-institution employees through calls, texts and emails to gain access to customer accounts. FBI
The safest response is to end the contact and verify the situation with your bank through a channel you already trust.
The scam often begins with a believable problem: an unfamiliar purchase, attempted transfer or suspicious login.
A caller may know your name, the bank you use or other personal details. Caller ID may even display a familiar number. The fraudster uses that information to establish authority and create urgency before asking you to take action.
The FBI specifically cautions consumers against trusting caller ID and recommends ending suspicious banking calls before contacting the institution independently.
Read TRB Red Flag Report: Fraudsters Impersonating Bank Fraud Departments for a real-world example involving a fraudulent bank representative and a one-time passcode.
Learn MoreA one-time passcode (OTP) helps confirm that the person attempting to access an account is authorized to do so. Banks will never initiate contact with you and then request an OTP. OTPs should only be utilized when you have contacted a verified source directly.
Fraudsters may trigger a legitimate code and then ask you to read it back, claiming the code will cancel a transaction or verify your identity. Providing it can allow the criminal to complete a password reset or gain control of the account.
TRB advises customers never to provide passwords, account numbers or one-time passcodes during an unsolicited call.
Some impersonators shift from account access to payment instructions.
They may claim your money needs to be transferred to a secure account, moved through another payment method or withdrawn while the fraud investigation continues. The FTC warns that anyone claiming you must move money to protect it is attempting a scam.
Any unexpected instruction involving movement of funds deserves independent verification before the transaction begins.
When someone contacts you claiming to be from your bank:
A convincing story, familiar caller ID and accurate personal information do not establish who is on the other end of the conversation.
End unexpected banking contacts that request credentials, security codes or movement of funds, then contact your bank independently before taking action. That verification step can stop an account-takeover attempt before access or money changes hands.
