Banking scams: how they work and how to stay protected

Banking scams have one thing in common: the criminal needs you to act before you think. They may pose as your bank, a supplier, or even the fraud department itself. The good news is that almost every variant collapses against a single habit, which we will come back to at the end.

The fake adviser call

This is the most damaging version, because it sounds so reasonable. Someone calls claiming to be from your bank's security team. They say your account has been compromised and that they need to "secure" your money, usually by moving it to a new account they control, or by reading them the codes your real bank sends to your phone.

Two details make it convincing. First, the caller often already knows your name, your bank, and sometimes recent transactions, all of which can be bought or pieced together from earlier data leaks. Second, the number on your screen may show your bank's real line, because caller ID can be spoofed.

None of that matters. A genuine bank never asks you to move money to keep it safe, and never asks for a full password or a one-time security code. If you hear either request, you are talking to a criminal.

Card fraud and small test charges

Stolen card numbers often surface first as a tiny payment, sometimes under a euro, that the fraudster uses to check the card still works before spending larger amounts. Watch your statements for charges you do not recognise, however small, and report them straight away. Most banks refund unauthorised card payments when you report them promptly.

Diverted transfers and altered IBANs

This one targets businesses and anyone who pays by bank transfer. The scammer intercepts or imitates an invoice and quietly changes the IBAN to their own account. You pay what you think is a legitimate bill, and the money is gone.

Before sending a transfer to a new or changed account, run the details through our IBAN checker and confirm the account with the supplier by a phone number you already trusted. A short call costs nothing. A misdirected transfer can be very hard to recover.

How to recognise the pressure

Banking scams rely on a small set of tactics. Spotting any of them should slow you right down:

• A sudden claim that your account or card is at risk, framed as an emergency.
• A request to share codes, passwords, or to "confirm" your full card number.
• An instruction to move money, install software, or approve a payment to fix the problem.
• A new or changed IBAN on an invoice, especially one delivered by email.

If you have already paid

Speed matters more than anything else.

1. Call your bank on the official number printed on your card and ask them to stop or recall the payment.
2. Freeze the affected card or account if fraud is confirmed.
3. Change the passwords for your online banking from a device you trust, and turn on two-factor authentication.
4. Keep a record of dates, amounts, and any numbers that called you.

If your details were stolen through a fake link rather than a call, the techniques overlap heavily with email and SMS phishing, and the same caution applies. Stolen banking data is also a common gateway to wider identity theft, so it is worth checking your other accounts too.

To report fraud and get official guidance, contact your national service such as Action Fraud in the UK, and tell your bank without delay.

The one rule

Here is the habit that defeats nearly every banking scam: never act on an incoming contact. If a call, message, or email asks you to move money or share a code, hang up or close it, then call your bank yourself using the number on the back of your card. The criminal needs your trust in the channel they chose. Take that away, and the scam has nothing left.