The caller knows your bank's name and the last four digits of your card. That is usually enough to make you stop arguing and start listening. Every impersonation scam runs the same three moves underneath. Once you see the shape, the costume stops mattering.
The Three Steps Every Version Runs
Step one: borrow an authority you already fear or trust. A bank, a tax agency, a police department, an employer, your own grandson. The scammer does not build credibility. They borrow someone who already has it.
Step two: invent a problem only they can see. Your account is being drained right now. There is a warrant with your name on it. You cannot check any of it from where you are standing. That is why the problem was chosen.
Step three: move you to a payment you cannot undo, quickly. A wire, an instant transfer, gift card codes, crypto, cash in an envelope. The rush exists to stop you doing the one thing that ends the call: hanging up and finding the real number.
The Bank Call and the "Safe Account" That Does Not Exist
Your phone rings and the caller ID shows your bank's real customer service number. That proves nothing. Caller ID displays whatever number the calling system tells it to, and faking one is cheap. The word for it is spoofing.
The caller reports fraud on your account and reads back your last four digits. Those digits are not secret. They print on receipts and turn up in breached data sold in bulk. Then comes the instruction: move your balance to a safe account, or hand cash to a courier.
There is no such account. Banks do ask you to move money, so that alone proves nothing. What a real bank never does is call and tell you to move your balance somewhere safe, or send a courier for cash. A compromised account gets locked from the bank's own side. Nothing has to leave.
Whether You Get the Money Back
Say the call worked and you moved the money yourself, using your own login. That counts as an authorized payment rather than a stolen one. As the rules stand today, fraud protections are built around the word unauthorized, and this scam exists to push your payment outside it. Our article on the payments you cannot take back covers that gap.
One ending flips that. Many of these calls finish with you reading out a one-time passcode and the scammer moving the money. The CFPB has said that being tricked out of your details is not the same as handing over your card. That transfer is unauthorized under Regulation E, and your bank owes you a refund. Ask for it in writing, and use that word.
Agencies Do Not Work This Way
Tax authorities, police, immigration, a court clerk about jury duty, the power company. Different scripts, three tells that never change. Payment is demanded immediately, the caller picks the method, and refusing is supposed to get you arrested or shut off.
Real agencies fail all three. The IRS normally makes first contact about a tax debt by mail, with a written notice, an amount you can dispute, and an appeals process. No US agency calls out of the blue and demands gift cards, prepaid card codes or cryptocurrency. The unsolicited demand is the tell, not the method. IRS payments go to the United States Treasury or through the payment options on irs.gov, never to a person and never through an app like Venmo or Cash App.
Two real calls do exist. The IRS uses private collection agencies, so a call about an old debt can be genuine, but only after the IRS has written first, and the collector never takes the money itself. Police do phone about warrants to arrange a surrender. Neither call ends in a payment over the phone, and that is the test that always holds. Report an IRS impersonator at tigta.gov, and forward a phishing message to phishing@irs.gov.
The utility version has a shorter fuse: pay in thirty minutes or the lights go out. Real utilities send a written shutoff notice first, and your state sets the notice period. Call the number printed on your bill.
The Job Offer That Pays You First
Students are a favorite target here. The offer arrives by text or campus email, dressed as remote work with flexible hours.
The first version uses a fake check. Your first task is buying equipment from the company's vendor. They send a check for more than the cost, you deposit it, the money appears in your app, and you forward the difference. The check comes back as counterfeit whenever the check writer's bank gets round to looking, and no wait makes it safe. Your bank claws back the whole amount, and every dollar you sent on is yours to repay.
The trap is one banking detail: your bank must make most deposited funds available within a day or two, and available is not cleared. It fronts you the money before hearing from the check writer's bank. Our article on pending and available balances covers the rest.
The second version skips the check. You pay up front for equipment, training or a certification, with reimbursement promised in your first paycheck. An employer buys the equipment its employees use, though contract work can genuinely need your own gear. Direction is the rule that always holds: money moving from you to an employer before you have worked a day is the scam.
The Habit That Beats All of Them
One routine handles all of them.
End the contact yourself. Hang up, close the message, do not reply. Nothing legitimate falls apart because you called back in ten minutes.
Find the number yourself. Read it off your card, a paper statement, or a web address you typed. Never the number the caller gave you, and never a link in the message.
Use a second line if you have one. Hanging up on a mobile ends the call, but an old analog landline can be held open, and then the scammer plays the operator you think you just dialed.
Tell one other person before any money moves. A friend, a parent, a coworker. The story only holds up on someone trapped inside it.
Report it even if you never paid. Scam calls and texts go to reportfraud.ftc.gov, and anything that reached you online goes to ic3.gov.
The demand for secrecy is itself the tell. No real bank, agency or employer has ever needed you to keep a payment quiet.
