The Fake Bank Security Call: Ireland's Costliest Phone Scam

Your bank's name appears on your phone screen. The caller knows your name, your address, maybe the last digits of your card, and speaks with the calm urgency of a real fraud analyst: someone has just tried to move money out of your account, and they need your help to stop it. This is the fake bank security call — the single most financially damaging phone scam in Ireland — and every detail is engineered to make you stop thinking and start obeying.

The script, step by step

Bank impersonation follows a reliable playbook. Recognising the sequence is your best defence:

1. The hook. A text warns of suspicious activity — a payment you didn't make, a new payee added, a login from abroad — and tells you to reply or call a number urgently. Sometimes the call comes first, with no warning text at all.
2. The reassurance. The caller reads back your personal details — name, address, card digits — information usually bought from earlier data breaches, not proof of anything. Your bank's real name may even show on caller ID, because spoofing it takes nothing but cheap software.
3. The urgency. The transfer is processing now, the fraudster is watching your account, and only immediate action stops it. Manufactured deadlines are the emotional engine of the entire scam.
4. The extraction. Now comes the ask, in one of a few predictable forms: read back the code we just texted you, approve this notification in your app, move your money to a safe account we control, or withdraw cash for collection.

The instant a caller claiming to be your bank asks for a one-time code, the call is a scam — full stop.

The rules every Irish bank actually follows

This is the single most important section in this guide, and it comes straight from what AIB, Bank of Ireland, permanent tsb, and every other Irish bank tell their customers: your bank will never ask you for a one-time passcode, never ask you to move money to a safe account, never ask for your full online banking login or PIN by phone, and never send someone to your home to collect cash or cards.

One-time codes exist specifically to prove that the person holding your phone is you. The moment you read one aloud to a caller, you have handed over the last factor of authentication — the code is almost certainly authorising a transfer or a new payee the scammer just set up. Likewise, there is no safe account anywhere in the banking system that customers must move their own money into. Any such instruction is theft wearing a uniform.

Why the call feels so real

Several tricks combine to defeat your scepticism:

• Spoofed caller ID: the scammer makes your bank's genuine number — or just its name — appear on your screen. Caller ID proves nothing.
• Breached personal data: details from past leaks let the caller pass as someone with access to your file.
• Professional phone manner: these are rehearsed operators working from scripts, often in organised call centres, polite and patient until the money moves.
• The follow-up text: a fake security code text arrives mid-call, exactly when the scammer says it will — because they triggered it by attempting the fraud themselves.
• Secrecy pressure: don't tell anyone, don't hang up, the investigation is confidential — all designed to stop you checking with someone sensible.

FraudSMART, the awareness service run by Banking & Payments Federation Ireland, publishes real examples of these scripts — reading one in advance inoculates you against hearing it live.

The verification callback: your strongest move

If anyone claims to be from your bank, hang up and call the number on the back of your card. This verification callback defeats spoofing entirely: scammers can fake any inbound number, but they cannot intercept a call you place yourself to the genuine number.

Habits that reinforce this defence:

• Never trust the inbound number. Even the real support line shown on caller ID means nothing.
• Never use a number the caller gives you. Call this department back at... is the same scam with extra steps.
• Say nothing about your accounts first. Even confirming yes, that's my balance hands the scammer useful data.
• Tell the real fraud team. When you reach your actual bank, report the impersonation attempt — banks track these and warn other customers.

If you already gave up information or money

Speed matters more than embarrassment. Act immediately:

1. Call your bank's real number now. Ask them to freeze accounts, recall transfers, dispute card payments, and reissue compromised cards. For instant transfers, minutes genuinely matter.
2. Change your passwords from another device — online banking first, then email — and enable two-factor authentication everywhere available.
3. Report to the Gardaí at your local station, especially for significant losses; banks and insurers often require a report reference.
4. Report the scam text to 7726 and check ComReg's nuisance communications guidance for call reporting.
5. Watch for recovery scams. Victims' details get sold on, and a caller offering to recover your money for a fee is simply round two of the fraud.

The fake bank call works because it arrives wearing absolute trust — your bank's name, your own details, a crisis only you can fix. But the real bank has a door the scammer can never stand in front of: the number on the back of your card. Hang up, call back, verify — and the most expensive phone scam in Ireland collapses every single time.