The Three-Caller Scam
Practice spotting the FBI's "Phantom Hacker" scam: a fake technician, a fake bank fraud team and a fake federal agent who all want your savings.
Scam simulator · Phone calls
A text asks whether you just spent $1,263, and minutes later your bank’s fraud team calls. Practice what to do, and see how a caller who seems to be protecting you can empty your savings.
Why it matters: Americans reported losing nearly $1 billion to business impersonators in 2025, and fake banks caused the highest losses. When people are talked into moving money to "protect" it, the FTC says, their losses are "often limited only by their available funds." (US Federal Trade Commission, June 2026)
It’s a weekday morning and you’re doing the crossword. Your phone is on the table beside you.
Below, each step shows what you'd see, the choices people make, and why each one is safe or risky. The summary at the end tells you what to look for and what to do.
You'll see each message or call as it would really look. Choose what you'd do, and you'll find out why. Nothing here is real: no messages are sent and nothing you choose leaves your device.
Your phone buzzes. The text appears in the same conversation as your bank’s usual messages, right under last month’s statement reminder.
What do you do?
Could a scammer’s text land next to your bank’s real ones? What might happen if you reply?
Reply NO. I didn’t buy anything, and I want them to stop it.
Risky choice (your choice)
It feels like the obvious answer, but replying, whether YES or NO, tells the scammers you’re worried and ready to talk. Very soon, the “fraud department” calls.
Ignore it. If it’s real, the bank will sort it out.
Better, but not the safest (your choice)
Not replying is good. But if there’s a chance it’s real, it’s worth checking in a safe way: open your bank’s app or call the number on your card, so you know for sure.
Don’t reply. Open my bank’s app, or call the number on the back of my card, and ask about the purchase.
Safe choice (your choice)
That’s the safe way to check. If there really was a strange purchase, your bank will see it, and you’ll know you’re talking to your bank because you made the call.
Red flags at this step
What's really going on
Scammers can fake the name a text comes from, so their message can land in the same conversation as your bank’s real texts. Australia’s phone regulator warns that these fake texts appear in the same message thread as ones from the real organization. The US FDIC says that if you respond, “you might get a call from someone pretending to be from the bank’s fraud department.”
Suppose you replied, or simply waited. A few minutes later, your phone rings. The caller ID shows your bank’s name.
Incoming call
Caller ID: Your Bank
What do you do?
Can the name on your screen be faked? Would your real bank rush you?
Keep talking. It says my bank on the screen, and he knows my name and card number.
Risky choice (your choice)
Caller ID can be faked to show any name or number, and scammers get names and card details from data breaches. None of that proves who he is. He’s also hurrying you, which your real bank won’t do.
Ask him to tell me my address and date of birth, to prove he’s real.
Better, but not the safest (your choice)
He may well know them. Criminals often have this kind of information from data breaches. The only real proof is a call you make yourself, to a number you already trust.
Say “I’ll call you back”, hang up, and call the number on the back of my card, from a different phone if I can.
Safe choice (your choice)
That’s the golden rule. If there’s a real problem, your bank’s fraud team will find it when you call. Using a different phone, or waiting a few minutes, helps make sure the scammer isn’t still on the line.
Red flags at this step
What's really going on
It’s easy for criminals to make any name or number appear on your phone. Ofcom, the UK’s phone regulator, says faking numbers to look like they come from a trusted organization such as a bank is a common tactic. Australian police say scammers get names, dates of birth, account details and even balances from earlier data breaches, and use them to sound genuine.
The caller says he just needs to confirm it’s really you before he can block the payments. While he’s talking, a text arrives.
What do you do?
Read the new text slowly. What is the code actually for?
Read him the code. He said it’s to confirm it’s me and block the payments.
Risky choice (your choice)
The code isn’t for blocking anything. Read the text: it’s to sign in to your online banking on a new device, which is his. With it, he can see your accounts and try to move your money himself.
Don’t read it out. The text says never to share it, even with the bank. Hang up and call the number on my card.
Safe choice (your choice)
Exactly right. Your bank’s own text gives you the answer. A real fraud team never needs you to read a code back to them.
Red flags at this step
What's really going on
Banks send one-time codes when something important happens, such as signing in on a new device or adding someone new to pay. The scammer starts that process at his end while talking to you, so the code you get is real, and it works for him if you read it out. That’s why the text itself warns you never to share it.
Suppose the code was shared. A minute later, the caller sounds worried.
Call in progress
Caller ID: Your Bank
What do you do?
Does a bank need you to move money in order to protect it?
Do as he says. The account is in my name, so it must be safe.
Risky choice (your choice)
The name on the account can say anything; the account belongs to the criminals. Once you send the money, getting it back is very hard, because you authorized the payment yourself.
Hang up. No bank ever asks you to move money to keep it safe. Then call my bank on the number on my card.
Safe choice (your choice)
That’s the rule that beats this scam every time. Your real bank can freeze a suspicious payment and protect your accounts without you moving a cent.
Red flags at this step
What's really going on
This is the moment the whole scam has been building to. UK Finance describes it as the fraudster claiming there’s been fraud on your account and that you must move your money to a “safe account” to protect it. Keeping you on the line stops you calling your real bank. As an Australian bank’s fraud chief puts it: “Banks won’t rush you”, and they will never ask you to “move money to a ‘safe account’.”
Suppose you went along with it. The transfer is too big for the app, so the caller asks you to go to your branch. He has one more instruction.
Call in progress
Caller ID: Your Bank
At the branch, the teller asks what the transfer is for. What do you do?
Why would your bank want you to lie to its own staff?
Give the cover story. I don’t want to tip off the dishonest employee.
Risky choice (your choice)
The “dishonest employee” is made up so you’ll shut out the one person who could stop the scam. The teller can only help if you tell them what’s really going on.
Tell the teller the truth: someone from the fraud team called, told me to move my savings, and told me to keep it secret.
Safe choice (your choice)
That’s the best thing you can do. The teller can check with the real fraud team and stop the transfer. Anyone who tells you to lie to your own bank is not your bank.
Red flags at this step
What's really going on
Your bank will never ask you to help catch one of its own staff, or to lie to them. Scammers invent a crooked employee because a teller who hears the real story will recognize the scam. The FBI says callers in these scams tell people not to tell anyone the real reason they are moving their money.
In the UK, Canada and New Zealand, a common version of this call ends differently. Instead of a transfer, the caller asks for your card.
Incoming call
Caller ID: Your Bank
What do you do?
Has your bank ever sent someone to your home to collect a card?
Put the card and PIN in an envelope for the courier. It’ll save me a trip to the branch.
Risky choice (your choice)
The courier works for the scammers. With your card and PIN, they can take cash from ATMs and buy expensive goods on your account straight away, often before you know the card is gone.
Hand over the card, but keep my PIN to myself.
Better, but not the safest (your choice)
Keeping your PIN private is better than handing over both, but the card is still at risk in the wrong hands. No bank sends anyone to collect cards, so don’t hand it over at all.
Refuse. Hang up, call my bank on the number on the card from a different phone, and cut up the card myself if they tell me to.
Safe choice (your choice)
That’s exactly right. Banks never collect cards from your home or your mailbox. If a courier is already on the way, call the police as well.
Red flags at this step
What's really going on
TSB, a UK bank, puts it plainly: “Neither a bank, nor the Police will ever request that you post or handover your card, or cash.” In June 2026, New Zealand police warned of callers telling people to leave their bank card in the mailbox to be “collected for investigation”. In Canada, police say “banks never ask customers to provide their cards to couriers”, and Ontario police say Canadians reported losing more than $28 million to fake “bank investigators” in 2025.
A week later, whatever happened before, the phone rings again. The caller ID shows your bank’s name.
Incoming call
Caller ID: Your Bank
What do you do?
Who would know about the money you lost?
Go along with it. I’d do anything to get my money back.
Risky choice (your choice)
This is the same gang, or people who bought your details from them. The promise of getting your money back is the hook for a second loss.
Hang up. Call my bank on the number on my card, report what happened to the police, and tell someone I trust.
Safe choice (your choice)
That’s the way to real help. Your bank’s real fraud team and the police won’t charge you, and won’t ask you for codes.
Red flags at this step
What's really going on
People who have lost money once are often targeted again, by the same criminals or by people who bought their details. Real help comes from your own bank and the police, and it’s free. In the UK, most bank transfers lost to scams like this can be refunded up to £85,000 if you claim within 13 months, so tell your bank even if you feel embarrassed.
The text, the caller ID and the helpful fraud team were all fake. The gang already had your name and card details, probably from a data breach, and they used the code to get into your online banking. The “secure holding account” and the courier both belonged to them. Your real bank won’t rush you, ask for a code, tell you to move money, or send someone for your card. Hanging up and calling the number on your card stops this scam at any step.
Test your family
Send this simulator to a parent, grandparent or friend. They try it on their own phone or computer, and at the end they can send their score straight back to you, so you can see which steps caught them out. Then talk it over together.
Nothing is sent to us. Your first name and their score travel only inside the link you send, after the # sign, which web browsers never send to our website.
You were challenged
Finish the simulator above, then you can send your score back. They'll see which steps you got right, and which ones caught you out.
Only your first name and which answers you chose go in the link, after the # sign. Nothing is sent to us.
From simulator to confidence
This simulator is one scam. Scam-Proof puts 50 of today's scams in one calm, large-print book to keep by the phone, for you and the people you love.
This scam is in the book. Chapter 2 covers fake bank calls, and scams 1, 2, 18 and 47 in the book's 50-scam library cover the fraud-team call, the safe account, the "did you make this purchase?" text and the code request.
254 pages · 16-point large print · paperback and Kindle ebook · written for older adults and the families who help them
Scam-Proof is almost ready. Leave your email and we'll tell you the day it's on Amazon.
See inside Scam-Proof · Buying it for someone? Read our gift guide.
Summary · keep this
Remember: Your bank will never ask you to read out a code, move money to keep it safe, or hand your card to anyone. Hang up and call the number on your card.
Don't be embarrassed. These scams are run by professionals, and acting fast gives you the best chance of stopping the damage.
Phone numbers and web addresses were checked on 28 September 2026. They can change; if one doesn't work, search for the organization's official website, and please let us know.
The people, numbers, companies and web addresses shown in this simulator are made up. The way the scam works is taken from real cases reported by police, regulators and consumer groups.
Practice spotting the FBI's "Phantom Hacker" scam: a fake technician, a fake bank fraud team and a fake federal agent who all want your savings.
Practice spotting courier fraud: the fake detective, the phone line that stays open, the cash or bank card "for evidence" and the courier at your door.
Practice spotting the fake unpaid-toll text step by step: the link, the "reply Y" trick, the fake payment page and the code that hands over your card.
Prefer to read? The "Safe Account" Scam: Why Your Bank Will Never Ask You to Move Money to Keep It Safe

Printable wallet cards, a family safe-word sheet, easy AI prompts and a trusted-numbers sheet for beside the phone. Free when you join the Plainspoken Tech letter.