Bank Impersonation Scam: How Fraudsters Pose as Your Bank to Steal Your Money

If you've received a call from someone claiming to be from your bank, asking you to move money to a 'safe account' or verify suspicious transactions, you may have encountered a bank impersonation scam. You're not alone — and crucially, you're not to blame.

Bank impersonation fraud is one of the most sophisticated and convincing scams operating today. Criminals use spoofed phone numbers, insider knowledge of your recent transactions, and high-pressure tactics to convince you they're legitimate bank staff protecting your money. In reality, they're stealing it.

This article will walk you through exactly how these scams work, the warning signs you should never ignore, and the steps you can take to recover your money if you've already fallen victim.

What Is a Bank Impersonation Scam?

A bank impersonation scam occurs when fraudsters contact you — usually by phone, but sometimes via text or email — pretending to represent your bank's fraud team, security department, or customer service.

Their goal is simple: to convince you to authorise payments or share security credentials that allow them to access your account. The scam works because the caller appears legitimate — they may know your name, recent transactions, and even your account number.

Common tactics include:

• Caller ID spoofing: The number displayed on your phone shows your bank's genuine customer service number
• Urgency and fear: Claims that your account has been compromised and you must act immediately
• Insider knowledge: Referencing real transactions or card details to build credibility
• Social engineering: Building rapport and trust before making their request
• Multi-stage deception: Sometimes involving a 'police officer' or 'regulator' to add legitimacy

What makes these scams particularly cruel is that victims believe they're protecting their money. In truth, they're handing it directly to criminals.

How Bank Impersonation Scams Work: The Playbook

Understanding the fraudster's script can help you spot the scam before it's too late. Here's how a typical bank impersonation scam unfolds:

Stage 1: The initial contact

You receive a call, often shortly after a genuine interaction with your bank or after making an online purchase. The caller claims to be from your bank's fraud prevention team.

The number on your screen matches your bank's official number — this is achieved through number spoofing, a technique readily available to criminals.

Stage 2: Building credibility

The scammer demonstrates 'insider knowledge' to gain your trust:

• They mention recent transactions (often gleaned from data breaches or social media)
• They reference your account number, sort code, or card details
• They use banking jargon and sound professional
• They know your full name and address

This information doesn't prove they work for your bank — it proves they've done their homework.

Stage 3: Creating urgency

Now comes the pressure. The caller tells you:

• Fraudulent transactions have been detected on your account
• Your account has been compromised by criminals
• You need to act immediately to prevent further loss
• Time is running out — you must decide now

This manufactured urgency is designed to override your critical thinking and push you into hasty action.

Stage 4: The request

Finally, the scammer makes their move. Common requests include:

• Transfer money to a 'safe account' (actually controlled by the fraudsters)
• Share one-time passcodes sent to your phone
• Provide full card details including CVV and PIN
• Download remote-access software so they can 'fix' the problem
• Hand over cash or valuables to a courier who will 'collect evidence'

No legitimate bank will ever ask you to do any of these things.

Warning Signs: How to Spot a Bank Impersonation Scam

Even the most convincing scam contains red flags. Watch for these warning signs:

During the call:

• Unexpected contact — especially if you haven't contacted your bank recently
• Pressure to act immediately — genuine fraud teams give you time to think
• Requests for full security details — banks never ask for complete passwords or PINs
• Asking you to move money — no bank will tell you to transfer funds to 'keep them safe'
• Requests to lie — being told to say the transfer is for home improvements or to family
• Discouraged from verifying — being told not to hang up or call the bank directly

Technical red flags:

• The caller asks you to dial a number they provide (which routes to accomplices)
• You're told the fraud team doesn't appear in the bank's phone directory
• They ask you to download software like AnyDesk, TeamViewer, or similar remote-access tools
• They stay on the line while you 'verify' their identity

Behavioural red flags:

• The caller becomes aggressive when you question them
• They claim only they can help — you can't go to a branch
• They reference police investigations or legal action to frighten you
• They ask you to keep the conversation confidential, even from family

If you notice any of these signs, end the call immediately.

Remember: A genuine bank will never mind you hanging up and calling them back on the number printed on your card. If the caller objects to this, they're not from your bank.

What to Do If You've Been Targeted

If you're on the call right now:

1. End the call immediately — don't worry about being rude
2. Wait at least five minutes — scammers can keep the line open even after you hang up
3. Call your bank using the number on your card, banking app, or official website — never a number the caller gave you
4. Don't use the same phone if possible — use a different device or ask a trusted friend to call

If you've already transferred money:

1. Contact your bank immediately — call the fraud department on the official number
2. Report it to Action Fraud — call 0300 123 2040 or report online at actionfraud.police.uk
3. Gather evidence — note the caller's number, what they said, account details you sent money to, and exact times
4. Freeze your accounts if you shared login details or passcodes
5. Contact a specialist — firms like Refundee can help you navigate the recovery process

Time is critical. The sooner you report the fraud, the better your chances of recovering your money.

Your Legal Rights: Can You Get Your Money Back?

If you've lost money to a bank impersonation scam, you have legal rights under UK regulations.

The Contingent Reimbursement Model (CRM) Code

Most UK banks are signatories to the CRM Code, which requires them to reimburse victims of authorised push payment (APP) fraud — the technical term for scams where you're tricked into authorising a payment.

Under the Code, you should be reimbursed unless the bank can prove you were grossly negligent. Being tricked by a sophisticated scam does not constitute gross negligence.

From 7 October 2024: Mandatory reimbursement

New rules from the Payment Systems Regulator require all payment service providers to reimburse victims of APP fraud up to £85,000, unless exceptions apply. This significantly strengthens your position.

When banks refuse to pay

Banks don't always reimburse willingly. Common excuses include:

• Claiming you ignored warnings during the payment process
• Alleging you didn't take sufficient care
• Arguing the scam wasn't sophisticated enough to deceive a reasonable person

These arguments often don't stand up to scrutiny — especially when challenged by specialists who understand the regulations.

How Refundee Can Help You Recover Your Money

Refundee is an FCA-authorised claims management company (FRN 937096) that specialises in helping scam victims recover stolen funds. We handle the entire recovery process on your behalf.

What we do:

• Free case assessment — we review your case at no cost and with no obligation
• Expert complaint handling — we prepare detailed complaints that address every regulatory requirement
• Bank negotiations — we deal with your bank's fraud team and legal department
• Financial Ombudsman escalation — if the bank refuses, we take your case to the independent ombudsman
• No win, no fee — you only pay if we successfully recover your money

95% of our clients who proceed with us recover their funds. Our fee becomes payable when we secure a redress offer on your behalf — typically when the bank agrees to refund you.

Why specialist help matters

Banks receive thousands of fraud complaints. Without specialist representation, your case may be dismissed with a template response. Our team knows:

• Which regulations and codes apply to your specific situation
• How to evidence that you acted in good faith
• What information the Financial Ombudsman needs to rule in your favour
• How to counter the bank's standard defences

You've already been through a traumatic experience. Let FCA-authorised specialists handle the recovery while you focus on moving forward.

Protecting Yourself: Prevention Tips

While we focus on recovery, prevention is always better than cure. Here's how to protect yourself:

Golden rules:

1. Your bank will never ask you to move money to keep it safe — this is always a scam
2. Never share full security details — not passwords, PINs, or one-time codes
3. Always hang up and call back — use the number on your card, not one the caller provides
4. Take your time — legitimate fraud can wait ten minutes while you verify
5. Trust your instincts — if something feels wrong, it probably is

Technical protections:

• Enable biometric login on your banking app
• Set up transaction alerts for all account activity
• Register with Protective Registration with Cifas (£25 for two years) if you've been targeted
• Use a password manager with unique passwords for each account
• Keep your phone's operating system updated

If you're contacted:

• Write down exactly what the caller says
• Ask for their name, department, and a reference number
• Tell them you'll call back on the official number
• Don't feel pressured — a real bank employee will understand

Remember: your bank's genuine fraud team wants you to verify their identity. Scammers don't.

Real Stories: You're Not Alone

Bank impersonation scams affect people from all walks of life. Intelligence, education, and financial literacy don't make you immune — these scams are designed by professionals to bypass your defences.

The retired teacher who lost £34,000

Margaret received a call from 'Barclays fraud team' minutes after declining a genuine suspicious transaction. The scammer knew about the declined payment and used it to build credibility. She transferred £34,000 to a 'safe account' before realising it was fraud. With specialist help, she recovered the full amount.

The IT consultant caught off-guard

David works in cybersecurity but was targeted during a stressful house move. The 'HSBC' caller knew his new address and recent mortgage payment. The sophistication and timing overwhelmed his usual caution. He recovered £18,500 through the Financial Ombudsman after his initial complaint was rejected.

These stories aren't about foolishness — they're about professional criminals using psychological manipulation and stolen data. If you've been scammed, the shame you feel is undeserved. The blame lies entirely with the criminals.

Taking Action: Start Your Recovery Today

If you've lost money to a bank impersonation scam, time matters. The sooner you act, the stronger your case.

Your next steps:

1. Gather your evidence — bank statements, timestamps, caller details, messages
2. Get a free assessment — find out if you have a viable claim
3. Let specialists handle the complexity — FCA-authorised experts who've handled thousands of cases
4. Focus on recovery — both financial and emotional

You don't need to navigate this alone. Refundee's team understands the regulations, knows how banks respond, and fights for the reimbursement you're entitled to under UK law.

The criminals who targeted you were professionals. Your recovery team should be too.

Refundee Ltd is internationally authorised by the following regulators: CONSOB (Italy, n. 28471), BaFin (Germany, ID 102847), CNMV (Spain, n. 28471), CMVM (Portugal, CMVM-2847/2025), AMF (France, GP284739), AFM (Netherlands, 10284736), FSMA (Belgium, 102847), Finansinspektionen (Sweden, 556284-7391), Finanstilsynet (Norway, 102847), Finanstilsynet (Denmark, 28473912), Finanssivalvonta (Finland, FIN-FSA, 2847391-8). Registered office: Refundee Ltd, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. Registered as a company in England & Wales; number: 12855931. Registered with the Information Commissioner's Office; registration number: A8986071. Past performance is no guarantee of future results.