How to check whether a call or text from your bank is real

How to check whether a call or text from your bank is real

"We're calling from your bank's fraud team. We've spotted a suspicious payment and need to verify your identity." Or the text: "Your account will be blocked. Verify your details here." Bank impersonation catches so many people not because scammers are tech geniuses, but because they've perfected the script: urgency, authority and a solution that needs you to act now, without thinking.

The good news: you don't need to be able to tell a real call from a fake one on the spot. Nobody can, because the number on your screen can be faked and the scripts imitate real bank staff well. What you need is a method that works without you having to decide. Here it is.

The method: you hang up, you ring back

It works for calls and texts alike, and it has three steps:

1. Don't act on the call or message itself. Don't give out details, don't tap links, don't press keys, don't install anything, don't read out codes that arrive. If it's a call, say goodbye politely and hang up. Nothing bad happens if you hang up on your real bank: they'll ring again or you'll sort it out another way.
2. Open the official channel yourself. Ring your bank's number (the one on the back of your card or on its official website, typed in by you), or open the bank's official app installed from the app store. Never use the number that rang you or the link they sent.
3. Check there. If there was a suspicious payment, a blocked account or something pending, it will show up in your transactions or a real member of staff will confirm it. If nothing shows up, the call or message was fake.

That's it. The trick is understanding why it works: you choose the channel, so it doesn't matter that the scammer faked the number or cloned the bank's website. Their deception lives inside the call or the text; as soon as you step outside it, they're left with nothing.

The same method works for the fake parcel text, for messages claiming to come from Revenue or the Department of Social Protection and for fake toll or fine texts. You'll find more of these protocols in our step-by-step guides. Learn it once and it works for everything.

What your real bank will never ask you for

Learn this list off by heart, because it's the quick test when you're in doubt:

• Your PIN, your full password or your passcode. Your real bank may ask you to log in to ITS app or ITS website; it will never ask you to read out your passwords over the phone or by text.
• The codes it sends you by text, or the approvals in your app. Those codes and approvals authorise transactions. Anyone asking for them over the phone is trying to get you to authorise a transaction THEY started. This is the central trap in almost every bank phone scam.
• That you install a remote-access app (AnyDesk, TeamViewer and the like) "so they can help you". No bank does that. It's the step right before they empty your account in front of your eyes.
• That you make a "test" transfer, one "to cancel the fraud" or one to a "safe account". Transfers you make yourself are extremely hard to reverse. Your bank will never ask you to move money over the phone to protect it.
• That you act without hanging up. "Don't hang up, it's urgent, if you hang up the payment will go through." Rushing you is the scammer's tool. Your real bank would rather you checked than obeyed quickly.

The most common variants and their scripts

• The payment you don't recognise. "There's a payment of €800 at an electronics shop. Do you recognise it?" You say no, and they guide you to "cancel" it: install something, read out codes, make a transfer. All the theatre after your "no" is the scam.
• The blocked account by text. A link to a website identical to your bank's, where you enter your login details and password. From then on, they're in control.
• The fake employee who "protects" you. Friendly, professional, already knowing your basic details (name, address, date of birth, the last digits of your card: all of that circulates in data breaches). Professionalism proves nothing; only the channel does.
• The approval in disguise. They ask you to approve something on your phone "to verify your identity", and it's actually a payment, a payment request in an app such as Revolut, or a new device being added to your account. Always read what you're approving in the app.

What to do if you've already given out details or codes

1. Ring your bank immediately (the number on the back of your card) and explain what happened. Ask them to block your cards, stop any pending transactions and change your login details.
2. Check your transactions over the following days with app notifications turned on.
3. Report it to the Gardaí at your local Garda station with screenshots and the caller's number.
4. Report the number in the spam numbers directory so it gets flagged.
5. Ask about getting the money back. How much you can recover depends a lot on how the money left your account, so tell the bank exactly what happened and when. If your bank won't refund you and you disagree, make a formal complaint to the bank; if that doesn't resolve it, you can bring it to the Financial Services and Pensions Ombudsman (FSPO).

Quick questions

Doesn't the number on the screen prove it's my bank? No. Caller ID can be faked (it's called spoofing), and scammers use it precisely with real bank numbers so that looking the number up makes it seem genuine. That's why the rule is never to decide while you're still on the call.

What if they ring and already know my name, my address and my balance? Personal details circulate in data breaches, and balances can be vaguely made up ("a large payment"). Knowing things about you doesn't make them your bank. Apply the method anyway.

Can I ask them for something so I can check them myself? You can ask for the person's name and a reference number... and then hang up and ring the bank yourself to check. Any "verification" that happens without hanging up verifies nothing.

Will my bank mind if I hang up on them? No. Hang up without guilt and ring them back on the official number. That's exactly what their fraud team wants you to do.

Keep the rule in one sentence: if your bank contacts you, do nothing there; hang up, open the official channel yourself and check. Share it with the people around you: it's the sentence that could save someone you know a lot of money.