Bank Impersonation Safe Account Fraud

A security representative insists that you immediately transfer funds into an external safe or protected account to resolve a breach.

Terminate the call immediately and contact your financial institution using the verified customer service number printed on your physical card.

• Never approve one-time passcodes or transfer funds to external accounts at the direction of an inbound caller.
• Set up independent out-of-band account alerts and hardware-based multi-factor authentication through your official banking portal.

How it works

This attack vector begins with an unsolicited text message or phone call spoofing a major financial institution's fraud department. The operative claims suspicious activity has compromised the victim's primary accounts. To protect remaining balances, the target is instructed to wire money, initiate a real-time peer-to-peer transfer, or deposit cash into a designated government-backed or safe reserve account. Attackers leverage spoofed caller IDs, professional scripts, and personal data harvested from prior breaches to establish credibility. Recent variations incorporate multi-stage calls involving fake fraud managers and mock case numbers. Legitimate banks maintain internal mechanisms to freeze compromised funds and will never direct account holders to protect capital by transferring it to an external account or payment wallet. All verification must occur through established, independent support channels initiated by the consumer.

Sources

• Federal Trade Commission (FTC)
• Federal Bureau of Investigation IC3
• American Bankers Association
• Better Business Bureau