Bank Impersonation Phone Scam UK: How to Spot and Stop Fraudsters
Your bank will never ring you out of the blue asking for your password or card details—but scammers will.
What is this scam?
In a bank impersonation phone scam, fraudsters call you pretending to be your bank—Barclays, HSBC, Lloyds, NatWest, Santander, or others. They use caller ID spoofing technology to make their number look genuine, often showing your bank's real phone number on your screen. The scammer claims there's suspicious activity on your account, a security breach, or an urgent transaction to verify. They may sound calm and professional, using real banking terminology to build trust. Their goal is to trick you into revealing login details, card numbers, PINs, one-time passwords (OTPs), or security codes—or to convince you to transfer money to a 'safe' account they claim is actually theirs. These calls are entirely unsolicited and the person on the line is a criminal, regardless of what they claim or what your phone displays.
Warning signs to look for
- The caller asks for your password, PIN, card number, or one-time verification code—your real bank will never ask for these over the phone.
- They create urgency, saying your account is locked, compromised, or involved in fraud, and you must act immediately.
- They ask you to stay on the line while they 'investigate,' then request you transfer money to a 'secure holding account' for protection.
- The caller tells you to go to an ATM or use online banking while staying on the call, which is a classic scam tactic.
- You don't recognise the specific context of their call—your actual bank will reference your recent transactions or known security events.
- They ask you to download a remote access app, screen-sharing software, or tell you to put your phone on speaker to 'verify' your details.
- The number on your caller ID looks right but something feels off about the conversation, or there are background noises suggesting a call centre.
How this scam works step by step
The scam begins when the fraudster calls your number using spoofed caller ID technology, making it appear your bank is ringing. They greet you by name (gathered from data breaches or public sources) and immediately reference an alert—unusual spending, a failed login, or a security threat. This creates panic and makes the call feel credible. Next, they claim they need to 'verify your identity' for security, then gradually ask for sensitive information: 'Can you confirm your last four digits?' progresses to 'What's your online banking password?' or 'I'll send you a code—read it back to me.' Once they have credentials or codes, they either attempt to log into your account remotely (sometimes with your permission) or ask you to transfer money to protect it. Many victims are guided through online banking while on the call, watching money disappear to accounts they cannot recover. The scammer stays on the line until funds are sent or login details are changed, then vanishes. By the time the victim hangs up and rings their bank's real number, significant damage has occurred.
How to verify if it is genuine
If someone claiming to be your bank calls, end the call immediately—hang up without saying anything more. Do not use any phone number they provide. Instead, find your bank's number on your debit card, your bank statement, or the official bank website (type the address directly into your browser). Ring that number and ask to speak to the fraud team. Your genuine bank will be able to tell you whether they tried to contact you. Real banks never ask for full passwords, PINs, or one-time codes over the phone—they may ask for partial information like 'the second and fifth digits of your PIN,' but never the whole thing. If a caller has already sent you a code via text or app, that code was generated by your legitimate bank, and scammers will try to extract it from you. For more on checking whether contact is genuine, see our guide on how to verify suspicious communications.
What to do if you have already interacted
If you shared sensitive information like a password or one-time code, contact your bank immediately on their official number (on your card or website) and tell them you've been targeted. Ask them to freeze or closely monitor your account, and consider changing your password and card PIN from a secure device at home. If you transferred money to a scammer's account, contact your bank within minutes—if the fraud is reported quickly, some banks can attempt to recall the payment before it clears, though success is not guaranteed. If you only shared partial information or felt unsure during the call, still report it to your bank immediately; they may spot attempted fraudulent activity. Report the phone number and details to Action Fraud (0300 123 2040) and the NCSC. If you received a suspicious text containing a link or code, do not click it and forward the message to 7726. Document everything: the time of call, what was said, and any account activity. Do not feel ashamed—these scams are professional and convincing.
Reporting this scam in the UK
Report the call to Action Fraud on 0300 123 2040 or via their online reporting tool at actionfraud.police.uk. Action Fraud is the UK's national reporting centre for fraud and will log your report. If you received a phishing text message during the scam, forward it to 7726 (spells SPAM) so the NCSC can track and shut down scam links. You should also report the incident to your bank's fraud team directly—they can flag the fraudster's account and help recover money if it's still in the system. Contact Citizens Advice consumer helpline on 0808 223 1133 if you need practical support navigating recovery. Report the phone number and caller details to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk if you received related phishing emails. Keep all records: call logs, bank statements showing transfers, and any voicemails left by the scammer. These help Action Fraud and your bank investigate and may aid police if criminal charges are pursued.
Frequently asked questions
Is my bank legitimate, or is it always a scam if they call me?
Your bank is legitimate, but unsolicited phone calls claiming to be from your bank are almost always scams. UK banks rarely call customers without prior appointment or contact request, and they never ask for passwords, PINs, or verification codes over the phone. If you're unsure whether a call is genuine, hang up and ring your bank's official number from your card or website to ask if they tried to contact you.
What should I do if I already sent money to a scammer?
Contact your bank immediately on their official number and explain you've been the victim of a bank impersonation scam. Tell them the name and sort code of the account you sent money to, and ask them to attempt a payment recall—if the funds haven't been withdrawn, your bank may be able to reverse the transfer. Report the fraud to Action Fraud on 0300 123 2040. Do not attempt to contact the scammer or send additional money, as this will only increase your losses.
How can I tell if a phone number claiming to be my bank is actually spoofed?
Spoofed numbers can look identical to your bank's real number on your caller ID, so you cannot trust the display alone. The safest method is to hang up and ring the number on your bank card or official website independently. If your bank didn't try to contact you, the call was a scam. Real banks also won't rush you or become frustrated if you want to verify their identity by calling back—legitimate staff expect this and encourage it.
How do I report a bank impersonation phone scam in the UK?
Report the call to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk. If you received a phishing text during the scam, forward it to 7726. Report the incident directly to your bank's fraud team and ask them to flag the scammer's account. For support navigating the process, contact the Citizens Advice consumer helpline on 0808 223 1133. Keep detailed records of the call, any messages, and bank statements showing unauthorised transfers.