In short: A bank impersonation scam is a call or text from someone pretending to be your bank. He says a charge you don't recognise has appeared, that your money is at risk, and that you must move it to a “safe” account to protect it. Sometimes a courier is sent to your door for your bank cards. Real banks never ask you to move money to keep it safe, never ask for your PIN or a code, and never send anyone to collect your card. If it happens, hang up and dial the number printed on the back of your card.

Quick Takeaways

  • “Move your money to protect it” is a scam every time it is said. The FCC is blunt about it: banks will never call or text and ask you to move your money to protect it (FCC).
  • The easiest red flag to spot is secrecy. If you are told not to tell the teller, the police, or your family, stop the conversation there.
  • The action that limits the loss is a hang-up and a callback: put the phone down, then dial the number on the back of your card yourself.

The FTC's October 2026 report to Congress found that adults 60 and over reported about $3 billion in fraud losses in 2025, roughly five times the $600 million reported in 2020. The FCC, citing the FTC, says bank impersonation carries the highest losses of any impersonation scam category.

What this scam looks like

It usually arrives as a text, in the late morning, on a day you have other things to think about.

“FRAUD ALERT: A $487.22 purchase at a store in Tampa FL was attempted on your debit card ending 4412. If you did not authorize this, reply NO and a fraud specialist will contact you.”

You reply, because it looks like your bank and it names your card. Then the phone rings and the screen shows your bank's name. The caller is friendly and unhurried: fraud department, an employee number, the charge read back to you. When you say it isn't yours, he sounds glad you caught it.

Then the story tightens. Five charges have been attempted, not one. Someone in another state is trying to take out a loan in your name. And while the investigation is open, the money in your account is exposed — but there is a way to protect it.

“What we do is move the funds into a secure holding account. It stays your money. It just sits with us until this closes, and then it comes straight back.”

There is no secure holding account. The FCC describes the same progression: a phony alert that asks you to “authenticate” your account, then the elaborate version where the bank says it is working with a government agency and you must move the funds, or convert them to gold or cryptocurrency, to keep them safe. In every version the money ends up where the scammer controls it.

Not all of these calls want a transfer. Hamilton Police in Ontario warned in October about a two-call version: first someone from your phone company offering a loyalty discount, then your “bank” saying your account is compromised and a courier is coming for your cards and PIN (CHCH, October 2026). It is the gold bar scam with your debit card in place of the bars. Police in Glasgow, Kentucky, described a third version: the bank is investigating theft by its own staff, you must withdraw your money so the serial numbers can be recorded, and later an “FBI agent” meets you to check the bills (WSMV, October 2026). No agency does that. No bank does that.

How it works

  • Step 1 — The opening detail. The call begins with something that sounds like proof: the last four digits of your card, your street, a real charge from last week. It is not proof. A correct detail means your information exists somewhere, not that the caller is your bank.
  • Step 2 — Urgency and secrecy. The money is moving out now, and the investigation is confidential. “Don't discuss it with the teller — she may be involved.” That instruction removes the person in the room who would have said “wait a minute.”
  • Step 3 — The move. A wire, a transfer through your banking app to a name you have never heard of, a one-time code read aloud, a “security app” that lets them watch your screen, or a trip to the branch for cash.
  • Step 4 — The check that “confirms” it. If you hesitate, they invite you to verify: they give you a number, or tell you to search the bank's name and call what comes up. You do, someone answers, and the story is confirmed. The FTC described the trick in an October 2026 alert: “It feels like you're verifying the story, but it's all part of their scheme.”
  • Step 5 — Gone. The money moves within minutes. As the FCC puts it, victims often lose everything in the account.

Why it works on people like you

This scam is not aimed at people who are careless. It is aimed at people who are careful — people who answer the phone, keep their paperwork, and trust their bank.

The bank was the place where a person knew your name and looked after your money. A calm voice, a badge number and the last four digits of your card fit neatly into that picture. Doubting it means doubting an institution you have dealt with honestly for fifty years, and that is hard to do on a Tuesday morning.

The fear being used is not greed. It is the fear of losing everything, at the age when savings are what stand between you and depending on other people. A scammer who can put that fear in the room in ninety seconds does not need to be clever after that; the deadline does the rest.

Then there is the silence. Being told to keep it confidential feels like being trusted with something serious; in practice it separates you from the son, daughter, friend or teller who would recognise the story. And moving money is unfamiliar now: it used to mean a form at a counter with a person watching, and it happens instead on a small screen, with a code, to a name that means nothing to you. If you cannot picture a normal transfer, you cannot see that this one is strange. None of that is a failure of intelligence. These calls are run as a business. If you were caught, it is because you were chosen.

Red flags to watch for

  • “Move your money to protect it.” To a “safe account”, a “holding account”, a “secure vault”, a “Federal Reserve account”. None of these exist.
  • Secrecy. A real bank will not tell you to keep a transaction secret (Banks Never Ask That).
  • Pressure measured in minutes. A real fraud department is happy for you to hang up and call back on the published number.
  • Anyone at your door for your card, your PIN or your cash. Banks do not send couriers for cards, and police do not send agents to examine banknotes.
  • “The bank is working with the FBI.” Banks and police do investigate fraud together, but neither asks the victim to hand cash to an officer. It is the story behind authority impersonation scams.
  • Caller ID showing your bank's name, or a number you were given ringing through to the “bank”. Numbers can be faked; use only the number on your card.
  • A request for your PIN, your full card number, your password, or a code that arrives by text. Your bank already knows these. It will not ask.

What to do if it happens to you

  • Hang up — mid-sentence is fine. You do not owe a stranger an explanation, and you should not call back any number he gave you.
  • Then call your bank yourself, using the number on the back of your card. Ask for the fraud department: “I think I was just targeted by a bank impersonation call. Is there a note on my account?”
  • If money has already moved, call the same day and ask them to stop or recall the payment. The FDIC's guidance notes the typical victim loses about $3,000 and is left exposed to identity theft, so ask about that too.
  • If you gave a code or password, or let them see your screen, change your banking password from a different device and ask the bank to reset your online access.
  • If cards were collected at your door, cancel them now and call the police the same day. A courier at the door is a crime in progress.
  • Write it down — times, numbers, what was said, what you sent — and tell one person: family, a friend, or the AARP Fraud Watch Network Helpline on 877-908-3360, which is free. Shame is the scammer's best tool; saying it out loud takes it away from him.

Where to report it

  • Your bank's fraud department first — the only place that can stop a payment already in motion.
  • ReportFraud.ftc.gov — the FTC. Reports turn individual losses into pattern data.
  • ic3.gov — the FBI's Internet Crime Complaint Center.
  • 1-877-ASK-FDIC (1-877-275-3342) — if you are unsure whether a bank, or a bank website, is real. BankFind lets you look one up yourself.
  • Your local police, especially if someone came to your door, and your state attorney general's consumer office.

One thing to do this week: find your bank's real phone number on your card, write it on paper, and tape it inside the cupboard where you keep your paperwork. Then agree one rule with your family: no money moves because of a phone call — not until you have called one other person and said the request out loud. If you know someone who lives alone, send them this page.