The call comes in, your bank’s number on the display. A pleasant voice introduces itself by name, security department: “We have detected a suspicious payment from your account. We must act immediately.” The next thirty minutes rank among the most expensive in thousands of people’s lives. Voice fraud (vishing) is today the most financially devastating attack on ordinary people, with individual losses running into tens of thousands of euros. The good news: the whole thing rests on a few tricks, and once you know them, it collapses at the first sentence.

How a scam call unfolds

The scenery varies, the mechanics do not:

  1. A credible opening. The caller claims to be from your bank, the police or even the central bank. The display often shows the institution’s real number; how that is possible comes below. They know your name, sometimes more, from leaked databases.
  2. The alarm. “Someone is trying to transfer your money right now.” “Your account has been used for money laundering.” The goal: switch off reason, switch on fear.
  3. The rescue plan. The core of the scam, one of three requests:
    • transfer your money to a “safe account” the bank has “prepared”,
    • install remote-access software (AnyDesk, TeamViewer) so a “technician” can “protect” the account,
    • read out card details and SMS verification codes, or approve notifications in your banking app.
  4. Isolation and pressure. You must not interrupt the call or phone anyone; the “police officer” may even forbid talking to branch staff because “they are in on it”. This is not a detail, it is the necessary condition for the scam to work.

A recent addition is the cloned voice: the call may open with what sounds like a relative in distress. The defence mechanics remain the same.

Why you cannot trust the number on the display

Almost anything can be forged as the displayed number of an incoming call; it is called spoofing. The attacker makes the call appear to come from the bank’s or police’s official line. Hence the fundamental rule: the display is not proof. There is exactly one way to verify a call: hang up and dial yourself the number from the back of your card or the bank’s official website. A genuine bank employee never minds; a scammer will do anything to stop you.

What a bank will NEVER do

Feel free to print this list:

  • Never asks you to transfer money to a “safe”, “technical” or “control” account. No such account exists.
  • Never asks for your PIN, CVC, full card number or SMS codes. The codes confirm payments; whoever asks for them is spending your money right now.
  • Never tells you to install remote-access software or make a “test payment”.
  • Never forbids verification. A real institution encourages caution; a scammer sabotages it.
  • The police do not investigate your money over a call. Real investigations do not come with a ban on hanging up.

The three-step defence

  1. Hang up. Suspicion is reason enough; no apology needed. You may end any call at any time; nothing is “in progress”, you will miss nothing.
  2. Call back yourself. The number from your card or the bank’s official website. If anything real was happening, you will learn it there.
  3. Never act during the call. No transfers, installations or code reading. Everything can wait the five minutes verification takes.

Go through these rules together as a family, especially with older members; they are the most frequent targets. A simple agreed habit helps: with any call about money, first hang up and phone the family. Related tricks are covered in scam messages and social engineering and AI scams.

Already happened? Every minute counts

  1. Call the bank on the official number (from the card) and describe what you entered, confirmed or installed. The bank blocks the card, access and pending transfers; some payments can only be stopped shortly after sending.
  2. Disconnect the device from the internet if remote access is running, and uninstall the program.
  3. Change your passwords for banking and e-mail and enable two-factor authentication; the full procedure is in what to do when your account is hacked.
  4. Report the fraud to the police. Even a failed attempt; reports help warn others.

Want to protect yourself and your parents?

We will set up payment limits and notifications in your banking, secure the devices, remove unwanted remote-access software and teach the family to recognise scam calls. For homes and businesses in the Liptov region.

Set up my protection

Summary

The scam call “from the bank” stands on three pillars: a forged number on the display, induced fear and a ban on verification. The defence is therefore short: do not trust the display, never act during the call, hang up and dial the number from your card yourself. A bank never asks for a transfer to a “safe account”, SMS codes or remote-access installation. Whoever rushes and isolates you is robbing you; whoever gives you time to verify has no fear of the truth.

This article is part of our Cybersecurity overview.