That “Fraud Alert” Call Isn't Your Bank

Why this call fools careful people

Most scam calls try to catch you doing something wrong. This one is smarter: it recruits you. "We've detected fraud on your account — but we can stop it if we act fast." Suddenly you and the caller are a team, working against a thief. Except the caller is the thief, and every helpful instinct you have — answer the bank, act quickly, cooperate with security — is being pointed at your own savings. According to the FTC, imposter scams were America's most-reported fraud again in 2025, and bank impersonators topped the losses among business imposters.

Here's the calm truth that beats all of it: a real bank fraud department protects your money without needing anything from you beyond "yes that was me" or "no it wasn't." The moment a caller needs you to move money, read out a code, or keep a secret from the teller — you're talking to a scammer, no matter what your caller ID says. And caller ID can say anything: spoofing lets crooks display your bank's real name and number, even the number printed on the back of your own card.

The three moves every fake fraud call makes

• The "safe account." "We need to move your money to protect it." The FTC is blunt: anyone offering to protect your money by moving it is always a scammer. Banks secure accounts on their side — your money never needs to travel.
• The one-time passcode harvest. The caller triggers a real security code from your real bank, then asks you to read it aloud "for verification." That code is the second lock on your account, and your voice just opened it. Codes are for typing into the bank's own app — never for saying out loud.
• The Zelle "pay yourself" trick. "To reverse the charge, just send the money to yourself." Behind the scenes, the code you read out let the scammer attach their bank account to your phone number in Zelle — so "paying yourself" pays them. Zelle itself warns about this exact play.

What a real bank fraud department actually does

• Blocks or declines the suspicious charge first, then notifies you. The real call is a notification, not an urgent mission.
• Asks yes-or-no questions: "Did you make this purchase?" That's roughly the whole conversation.
• Never asks for your PIN, password, full Social Security number, or a one-time code — the American Bankers Association's "Banks Never Ask That" campaign exists to say exactly this.
• Is completely happy to be hung up on. A real bank employee will tell you to call back using the number on your card. Only a scammer argues with a callback.

Those "Did you authorize $X? Reply Y/N" texts — the honest answer

Some of those texts are real — banks genuinely send fraud alerts, and they're useful. Real ones come from a 5- or 6-digit short code, name your card by its last four digits, ask a simple yes/no, and contain no links. Fakes have links, phone numbers to call, panic wording, or requests for codes. But here's the habit that works on both: never reply, never click, never call the number in the text. Open your banking app or call the number on the back of your card instead. If the alert was real, the bank sees it on your account and handles it — you lose nothing by coming in the front door. And replying "NO" to a fake alert is exactly what triggers the follow-up scam call.

The hang-up-and-call-back rule

1. Hang up. No explanation owed — "I'll call the bank myself" and click. Mid-sentence is fine.
2. Turn your card over and dial the number printed on the back (or a paper statement, or the number inside your bank's official app). Never the number the caller gave you, never the caller-ID number.
3. Say: "I got a call claiming to be your fraud department — can you check my account for alerts?" Whoever answers works for your actual bank; spoofing can't redirect a call you dial yourself.
4. If anything real was happening, the agent sees it and handles it right there. You give up nothing by hanging up on an incoming call — ever.

If you already gave them something

No lectures — this scam is engineered by professionals to get past good judgment. Call your bank's real fraud line immediately (back of your card, staffed around the clock) and say exactly what happened. Ask them to check whether your phone number was newly enrolled in Zelle. Change your online banking password, and your email password first if they match. If your Social Security number went out, freeze your credit at all three bureaus — my step-by-step guide is at billshometech.com/guides/freeze-your-credit — and if money already moved, work the full checklist in Scammed? The First 24 Hours. Speed beats embarrassment, every single time.

Where to report (all free)

• Your bank's fraud line — first call, always.
• FTC — ReportFraud.ftc.gov, five-minute form, worth doing even if you lost nothing.
• FBI IC3 — ic3.gov, for any case where money moved.
• Ohio Attorney General — 800-282-0515, the Consumer Protection Section.
• AARP Fraud Watch Helpline — 877-908-3360, free for everyone (no membership needed), trained specialists who'll talk a close call through.
• Fake bank texts — forward them to 7726 so your carrier can block the sender.

This scam has cousins

• Deepfake voice scams — when the call sounds like a grandchild instead of a bank. Same urgency, same fix: verify before anything moves.
• Freeze your credit — the free 20-minute shield that blocks new accounts in your name.
• Scammed? The first 24 hours — the full recovery checklist if money or information already went out.

What's in the printable PDF

• Anatomy of the fake fraud-alert call, minute by minute — the script barely changes.
• Caller ID spoofing in plain English, and why the screen is decoration, not proof.
• The "safe account" move — why it's a scam 100% of the time, per the FTC.
• The one-time passcode trick, and the rule: codes are for typing, never for saying.
• The Zelle "pay yourself" trick, step by step, so you'll see it coming.
• What real fraud departments do and never do — real call vs. fake call, side by side.
• The honest guide to "Did you authorize $X?" texts — some are real; here's the safe habit for all of them.
• A 60-second script with the exact words to say, so you don't have to invent them mid-call.
• Setting up real bank alerts so fakes stand out — a great half-hour project.
• Cut-out fridge card and wallet card with the five bank-call rules and your real fraud numbers.
• What to do if you already gave out a code, a password, or money — the first 24 hours.
• Reporting contacts: FTC, FBI IC3, Ohio AG, AARP helpline — plus Bill's five rules for bank calls.

Why I wrote this

Scam guides are the handouts I bring to senior-center talks around Portage County, and this scam is the one I most want on paper, because it targets responsible people — the folks who answer the bank because answering the bank is what good customers do. My honest take: you don't beat this call by out-thinking a professional script in the moment. You beat it with one boring habit you decide on in advance — hang up, call the number on your card. This booklet exists to make that habit automatic in your house. — Bill