Bank Impersonation & Safe Account Scam Recovery: A Complete Guide
Bank impersonation scams - where fraudsters call pretending to be from your bank's fraud team and convince you to move money to a 'safe account' - are among the most psychologically sophisticated frauds in 2026. Recovery is achievable in most cases under the new APP fraud reimbursement rules.
How safe-account scams work in practice
The classic pattern: you receive a call or text claiming to be from your bank's fraud team, often with a spoofed phone number that matches your bank's real number. The 'fraud officer' tells you suspicious activity has been detected on your account and you need to immediately move funds to a 'safe account' they have set up for you. Variations include pretending to be the police, HMRC, the FCA itself, or other authorities. The hallmark is urgency, authority, and a request to move money.
Why APP fraud rules favour victims
Since October 2024, UK banks must reimburse APP fraud victims unless they can prove gross negligence - a high bar that requires more than just 'you should have known'. The Payment Systems Regulator's rules cap individual claims at 85,000 pounds per case. Most safe-account scam losses fall within this cap. Banks now have strong financial incentive to prevent these scams and to reimburse quickly when they happen.
The Confirmation of Payee defence
When you transfer money, your bank performs a Confirmation of Payee (CoP) check matching the recipient's name to the account name. If there's a mismatch, the bank should warn you prominently. In safe-account scams, the 'safe account' is usually in a name that doesn't match anything you'd expect - a mismatch the bank should have flagged. If the warning was weak or you were coached past it, this is a strong refund argument.
Banking app and SMS protocol failures
Banks are increasingly required to detect anomalous transfers in real time. A first-ever transfer to a new payee for an unusually large amount should trigger additional friction. When banks fail to apply these protocols, the FOS treats that as evidence the bank fell short of its duty of care.
Recovery success rates and timelines
For pure safe-account scams within the 85k cap, full or substantial recovery happens in roughly 75-85% of cases we handle. The typical timeline is 4-12 weeks from engagement to reimbursement, with most cases resolved at bank stage. Cases above 85k, or cases involving multiple transfers over days/weeks, are more complex but still recoverable in most instances.
In-depth articles on this topic
Safe Account Scam Recovery
The full guide to safe-account scam refunds.
Read full article →Bank Impersonation Scam
How bank impersonation works and how to recover.
Read full article →APP Fraud Recovery
Complete guide to Authorised Push Payment fraud refunds.
Read full article →Bank Refused Refund - What Next?
Escalating to FOS when the bank says no.
Read full article →Frequently asked questions
The bank said I authorised the transfer, so they won't refund. Is that the end?
No, absolutely not. Under APP fraud rules, the relevant question isn't whether you authorised the transfer - it's whether you were defrauded into doing so. The bank's initial response is a starting position, not a final one.
What if the scammer called from my bank's real number?
Number spoofing is well-known to banks and regulators. The fact that your phone showed your bank's number actually strengthens your case - it demonstrates the sophisticated nature of the fraud.
How long do I have to claim?
You have 13 months from the transaction to report APP fraud to your bank for the mandatory reimbursement regime to apply. The FOS appeal window is six months from the bank's final response letter.
Can I claim if I gave the scammer my OTP codes?
Often yes. Sharing one-time codes is exactly the kind of behaviour scammers manipulate victims into doing, and the FOS recognises this. Coached behaviour under fraud pressure rarely meets the gross-negligence test.
What if the money was moved to multiple accounts before I noticed?
This 'mule chain' pattern is common and doesn't prevent recovery. Your originating bank remains liable under APP rules regardless of where the funds went next.
Refundee Ltd is internationally authorised by 15 regulators worldwide including CONSOB (Italy), BaFin (Germany), CNMV (Spain), CMVM (Portugal), AMF (France), AFM (Netherlands), FSMA (Belgium), Finansinspektionen (Sweden), Finanstilsynet (Norway/Denmark), Finanssivalvonta (Finland), SEC (USA), ASIC (Australia), CSA (Canada), FMA (New Zealand). Registered office: Refundee Ltd, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE. Past performance is no guarantee of future results.