A bank transfer scam call usually starts with a scary claim: suspicious activity, a hacked account, or a payment supposedly waiting to be stopped. The caller then tries to make you move your own money, approve a transaction, or reveal a password or one-time code.
These calls are often called vishing, short for voice phishing. End the call, then contact your bank through the number on your card or its official app. Do not trust the displayed caller ID or a callback number supplied during the call.
The guidance below is for U.S. consumers and U.S. reporting routes.
A realistic bank transfer scam script
The following is a fictional composite for education, not a verified recording. Real calls vary, and a convincing voice proves nothing.
Scammer: "This is the fraud team. We found an attempted transfer from your account."
You: "I will call the bank using the number on my card."
Scammer: "Do not hang up. The account may be drained while you wait. Move the balance to this secure account, and read the code we just sent."
You: "I don't approve transfers or share codes on incoming calls."
That exchange shows the trap. First comes a plausible problem. Then comes a deadline. Finally, the caller presents a payment or code as the solution.
The details change. The rhythm does not. Problem, panic, payment.
A supposed "authentic transcript" found online is difficult to verify. Official warnings are more useful because they identify the behavior that puts your account at risk, not just the words used in one call.
Red flags in a bank transfer scam call
Personal details can make a caller sound convincing. They do not prove the caller controls your bank account.
| Caller behavior | What it signals | Safer response |
|---|---|---|
| "Move your money to a safe, secure, or holding account." | The caller is directing your payment to a destination they chose. | Do not transfer anything. Hang up. |
| "Read the one-time code, PIN, or password we just sent." | The code may help approve a login or payment. | Keep it private and end the call. |
| "Act within five minutes or lose the money." | Pressure is replacing normal verification. | Take as much time as you need. |
| "Call this number back so we can fix it." | The caller is controlling the verification route. | Find the number yourself on your card or official app. |
| "We know your name, address, or last four digits." | The caller may have obtained exposed or publicly available information. | Treat those details as unverified. |
| "Stay on the line and do not tell anyone." | The caller wants to prevent an independent check. | End the call and speak with someone you trust. |
Caller ID is not authentication. The FBI's fraud and scam guidance describes spoofing and phishing as methods criminals use to obtain sensitive information. The FTC also warns that numbers shown on caller ID can be fake.
One red flag can be enough. You do not need to identify the exact script.
What to say before you hang up
Use one sentence and stop.
"I don't handle account security on incoming calls. I'll contact the bank using the number on my card."
Do not debate the caller. Do not press buttons, open a transfer screen, or read back a code while the person remains on the line.
Thing is, you do not owe an incoming caller proof that you are cooperative. If the call was genuine, the bank's official phone line can handle the question after you call it yourself.
If the message came by voicemail or text, do not use its link or phone number. Open the bank's app directly or use a number you already know.
If you already transferred money or shared information
Move quickly, but keep your account of what happened accurate. Your first call should be to the bank, not back to the scammer.
-
Contact the bank immediately. Use the number on your debit card, credit card, statement, or official app. Say that an impersonator persuaded you to make or approve a transfer, and ask for the fraud department.
-
Ask whether the payment can be stopped, recalled, or reversed. Give the amount, date, recipient, confirmation number, and payment type. A prompt report gives the bank more opportunity to review a pending transaction, but recovery is not guaranteed.
-
Secure your account. If you shared a password or code, change the password through a trusted device, sign out of active sessions, and check new payees, linked accounts, contact details, and recent logins. Ask the bank whether cards or online access should be locked.
-
Save the evidence. Keep the caller's number, time of the call, voicemail, texts, screenshots, transaction records, recipient information, and the exact request. Do not delete the conversation before the bank reviews it.
-
Report the incident. File an internet-enabled crime report with the Internet Crime Complaint Center, or IC3. You can also use the FTC's guidance for blocking and reporting unwanted calls.
-
Follow the case. Write down the bank's case number, the employee's name or identification number, and the date of each contact. Ask for the bank's decision and next steps in writing.
Do not pay anyone who later promises to recover the money for an upfront fee. That is another reason to verify every contact independently.
What official warnings show
The FDIC's bank impersonation guidance warns that criminals create fake bank websites to persuade people to transfer money or disclose personal information. It advises consumers to slow down and contact the bank using a familiar number, such as the one on a debit or credit card.
The pattern also appears outside fake bank websites. A caller may claim to be technical support, a government office, or a payment processor, then shift the conversation toward your bank account. The identity changes. The request for access or money is the constant.
Call blocking and labeling can reduce repeat attempts. The FTC's call-blocking guidance explains that services may filter calls or label them as spam or likely scams. Use those tools as a layer of protection, not as proof that an unmarked call is safe.
How Regulation E may fit the loss
The Electronic Fund Transfer Act and Regulation E protect individual consumers using many electronic fund transfers and remittance transfers. The NCUA's overview of EFTA and Regulation E lists examples such as ATM transactions, point-of-sale payments, ACH transfers, and certain telephone bill-payment plans.
That coverage does not create an automatic refund for every scam. The payment rail, account type, timing, and facts can all matter. An ACH, debit, peer-to-peer, remittance, or wire transaction may follow a different review process.
Tell the bank exactly what happened. It may distinguish between a transfer you personally approved after being deceived and one a criminal initiated after obtaining your credentials. Do not describe a payment as unauthorized merely to fit a form.
Ask the bank which error-resolution or fraud process applies, and request a written explanation if the claim is denied. Business accounts can have different protections from consumer accounts.
Common questions
Can a real bank call about suspicious activity?
Yes, a bank may contact you about possible fraud. The incoming call itself does not prove who is speaking.
Hang up and call the bank through a trusted channel. The bank can confirm whether it tried to reach you.
What if the caller knew my name or account details?
That information is not enough to authenticate the caller. Someone can know basic details without having legitimate access to your account.
Do not answer extra security questions just because the caller already knows some information.
Should I call the number shown on caller ID?
No. Caller ID can be spoofed, and a scammer may also provide a convincing callback number.
Use the number on your card or locate the bank through its official app or website.
What if I approved the transfer myself?
Report it anyway and explain that you were deceived by an impersonator. The bank may review whether the transaction was authorized, how it was initiated, and whether it can still be stopped.
There is no guaranteed outcome, but delaying the report removes useful options.
Save your bank's official fraud number in your contacts now. If the call already happened, contact the bank today with the transaction details and keep the case number.