Caller ID is not evidence
The number shown on an incoming call is supplied by whoever placed it. Networks have been adding authentication to reduce this, and it has helped, but the practical reality for a consumer has not changed: a call can appear to come from your bank's published number, from a local area code, or from a government switchboard. People routinely say "but it came from the real number" as though that settles it. It settles nothing.
The same is true in reverse. A caller who tells you to hang up and call back "to verify", then gives you a number to call, has simply supplied a second thing you should not use. The verification has to be done with a number you obtained independently: the one printed on the back of the card in your wallet, the one on your paper statement, or the one on the agency's own website that you navigated to yourself.
One more mechanic worth knowing, because it catches careful people. Some fraudsters instruct the target to call back immediately after hanging up. On some phone systems the previous call can be held open briefly, so the target hears a dial tone that was never real and reaches the same crew. The fix is to wait a couple of minutes, or better, to call from a different phone.
The recurring scripts
| Who they claim to be | The story | What actually happens |
|---|---|---|
| A tax or benefits agency | An unpaid balance, a suspended number, a warrant, an error on a filing that must be fixed today | The pattern to recognize is contact-by-phone with a demand for immediate payment or for personal details. Agencies generally initiate contact about tax and benefit matters by mail, and disputes go through a documented process rather than a phone call with a deadline. Verify anything you receive through the agency's own published contact details, never a number from the call. |
| Your bank's fraud department | "We have blocked a suspicious charge. To secure your funds, move them to a safe account we have opened for you." | There is no such thing as a safe account. This script exists to get you to authorize a transfer yourself, because a transfer you make is far harder to reverse than one someone makes without you. |
| Technical support | A pop-up with an alarm sound and a number, or a call about a virus detected on your machine | They ask you to install remote access software. Once connected they show you ordinary system logs as evidence of infection, then arrange a refund that is deliberately overpaid, and ask you to return the difference in gift cards or cash. |
| A family member in trouble | An accident, an arrest, a hospital, a phone that broke — hence the unfamiliar number. Money is needed now, and please do not tell the rest of the family. | Sometimes with a cloned voice, sometimes with a second person playing a lawyer or officer. The secrecy request is the load-bearing part, because one phone call to anyone else ends it. |
| A utility | Disconnection within the hour for an unpaid bill | Timed for weather extremes and for small businesses during service hours. Utilities have a written disconnection process and it is not a same-hour phone demand. |
| A subscription refund | An emailed invoice for software you did not buy, with a number to call and cancel | The same overpayment routine as tech support. The invoice was never real; the goal was to make you dial. |
| Someone offering to recover money you already lost | They know about the earlier fraud, and will get it back for a fee | They know because victim lists are traded. Paying to recover a loss is a second loss. |
Skip the story, look at the payment
Trying to judge whether a caller is genuine is difficult. Judging what they are asking you to do is easy, and it works even when the story is well told. Every one of the scripts above ends at a payment method chosen for one property: it cannot be pulled back.
| Method | Reversibility, in general terms | What that means for you |
|---|---|---|
| Gift cards read aloud over the phone | None. The value is gone the moment the numbers are spoken. | No legitimate business, agency, employer or court accepts gift cards. There is no exception. A request for them ends the conversation. |
| Wire transfer | Very limited, and only within a short window if the receiving bank cooperates | Wires are designed to be fast and final. If a wire has just gone out, call your bank immediately — speed is the only lever. |
| Cryptocurrency, including a crypto ATM | None | The presence of crypto in a story about a refund, a fine or a safe account is by itself conclusive |
| Payment app to someone you have not met | Generally treated as cash between people. Buyer protection usually applies to goods purchases, not to person-to-person sends. | Read the specific app's terms rather than assuming. The "friends and family" style of send in particular is not a purchase. |
| Cash handed to a courier, or mailed | None | A courier collecting cash or gold from a home is a pattern that shows up in agency-impersonation cases. Nothing legitimate works this way. |
| Bank transfer you authorize yourself | Depends heavily on the bank, the timing and the circumstances | This is why the "safe account" script exists. Ask your bank what their process is before you need it. |
| Credit card | The strongest position of anything on this list | Card networks have a dispute mechanism, and issuers have their own procedures on top of it. What is covered and for how long is in your cardholder agreement — check it, and ask the issuer, rather than relying on a general rule you read somewhere. |
The practical version: if a stranger on the phone directs you toward any of the first five rows, the story is false, and you do not need to work out which part of it was false.
The family emergency call, and cloned voices
This one deserves separate treatment because it defeats a defense people rely on — recognizing a voice. Short recordings are enough to produce convincing synthetic speech, and short recordings of most people exist, in videos posted publicly by them or by someone else. A distressed, brief, poor-quality call is the ideal cover, and the script builds in reasons for all three.
The structure is consistent. There is an emergency, there is a reason the number is unfamiliar, there is a second voice with authority, there is a sum of money, and there is a request not to contact anyone else yet. Every element is there to prevent the one action that ends it.
Two things work. The first is a code word agreed in advance with the people who might plausibly call you in trouble — a word with no connection to anything findable online. Ask for it. A real relative in a real emergency will be confused for a moment and then say it; a caller will improvise. The second is simply to hang up and call the person back on the number you already have for them, then call someone else in the family. Being wrong about this costs a few minutes of awkwardness. Being right saves everything.
What to actually do on the call
You do not owe a stranger a conversation. The most effective response is also the least satisfying: say nothing and hang up. Arguing, explaining that you know it is a scam, or playing along wastes your time and marks your number as answered by a live person.
If you think the matter might be real, hang up first and then verify. Wait a couple of minutes, use a different phone if one is available, and dial a number you sourced yourself. If the call was genuine, the institution will still be there and the matter will still be on your record.
Three things to hold regardless of how convincing the caller is: never read a one-time passcode to anyone, never install remote access software at a caller's request, and never let a caller stay on the line while you go to the bank, the store or an ATM. That last one is a common instruction, and it exists because it keeps you from talking to anyone who would stop you. Bank tellers and store clerks are trained to notice this, and they have prevented a great many losses simply by asking a question — which is why the caller tells you what to say if asked.
If money already moved
Order matters more than anything else here. Call the bank, issuer or app first, using the number on your card or statement, and say plainly that the transaction was induced by fraud. Ask what recall or dispute options exist and what the time limits are — do not assume, because the answer depends on the rail, the institution and your agreement. Then write down everything while it is fresh: the number that called, times, names used, what you said, what you sent, and any reference numbers. That record is the single most useful thing you can produce afterward.
File a report with the FTC at reportfraud.ftc.gov, and consider a report to local law enforcement, which some institutions ask for. If personal information went out along with the money, treat it as an identity theft matter as well and follow the identity theft response, which starts with a credit freeze. And be ready for the follow-up call offering to recover your money for a fee. It will come, and it is the same people or people who bought your details from them.
Anyone can be caught by this. Fraud crews run these scripts thousands of times a day, refine them constantly, and only need to reach you on a distracted afternoon. Shame is the reason most losses go unreported, and unreported losses are exactly what allows the same script to keep running.
The most useful thing on this page is not information, it is an agreement. Sit down with your parents, or your adult children, and settle two rules out loud: nobody in this family ever sends money because of a phone call without calling back on a known number first, and here is the word we will use. Do it on an ordinary evening, before there is anything at stake.
Questions people ask
The call showed my bank's real phone number. How is that possible?
The number displayed on an incoming call is set by whoever placed it, so a caller can present your bank's published line, a local number, or a government switchboard. Networks have added authentication that reduces this, but you cannot see the result of those checks as a consumer, and enough spoofed calls still arrive that "it came from the real number" is not evidence of anything. Treat the display as decoration. If the matter might be real, hang up, wait a couple of minutes, and dial the number printed on the back of your own card.
Does a tax or benefits agency ever call people?
Contact by phone is not impossible in every situation, which is why a flat rule about who calls is not useful. The reliable pattern is different: agency-impersonation calls demand payment or personal details immediately, threaten arrest or suspension within hours, and steer toward gift cards, wire, crypto or cash. Real tax and benefit disputes run through a written process with appeal rights and take weeks. If you get a call like this, do not confirm anything, hang up, and contact the agency using details from its own site that you navigated to yourself. Do not use a number the caller gave you.
What is the "safe account" call?
Someone identifying themselves as your bank's fraud team says an attack is under way and your money must be moved to a protected account they have set up. No bank does this. The entire purpose is to get you to authorize the transfer yourself, because a payment you made on your own instruction is much harder to unwind than an unauthorized one. The same call often instructs you not to mention it to branch staff, and to stay on the line while you complete it — both of which exist to keep anyone from interrupting. Hang up and call the number on your card.
My relative's voice was on the phone asking for money. Could it be fake?
Yes. Producing convincing synthetic speech from a short sample is cheap and widely available, and the script is built to hide the imperfections: a bad line, obvious distress, brevity, and a second person taking over as a lawyer or officer. The elements to notice are the unfamiliar number explained by a broken phone, the urgency, and above all the instruction not to tell anyone else. Hang up and call the person on the number you already have, then call another family member. Agreeing a code word in advance with the people who might really call you is the cheapest protection there is.
I sent gift card numbers. Is there any chance of getting the money back?
It is unlikely once the codes have been used, and they are usually drained within minutes, but it is not automatically zero and it costs nothing to try. Call the card issuer on the number on the back of the card, tell them the cards were used in a fraud, and give them the numbers and receipts — keep both. Report it to the store where you bought them, since some retailers have a fraud process for recent purchases. File with the FTC at reportfraud.ftc.gov. Then be alert for a call offering to recover the loss for an advance fee, which is a second scam aimed at the same people.