How to check whether a call or SMS from your bank is real

How to check whether a call or SMS from your bank is real

"Good day, this is your bank's fraud department. We have picked up a suspicious transaction and need to verify your identity." Or the SMS: "Your account has been suspended. Verify your details here." Bank impersonation keeps catching people out, not because scammers are technical geniuses, but because they have perfected the script: urgency, authority and a solution that needs you to act now, without thinking.

The good news: you do not need to be able to tell a real call from a fake one on the spot. Nobody can, because the number on your screen can be faked and the scripts copy real bank staff very well. What you need is a method that works without you having to judge. Here it is.

The method: hang up, then call back yourself

It works for calls and SMSs alike, and it has three steps:

1. Do nothing inside the incoming call or message. Do not give details, tap links, press keys or install anything, and do not read out any codes that arrive. If it is a call, say goodbye politely and hang up. Nothing bad happens if you hang up on your real bank: they will call again, or you will sort it out another way.
2. Open the official channel yourself. Call your bank on the number on the back of your card or on its official website (typed in by you), or open the bank's official app installed from the app store. Never use the number that called you or the link they sent.
3. Check there. If there was a suspicious transaction, a blocked account or something pending, it will show in your transactions or a real consultant will confirm it. If nothing shows, the call or message was fake.

That is all. The trick is understanding why it works: you choose the channel, so it does not matter that the scammer faked the number or copied the bank's website. Their deception lives inside the call or the SMS; once you step out of it, they have nothing.

The same method works for a message from SARS or SASSA, for a fake traffic-fine SMS and for a fake parcel SMS (see our step-by-step guides). Learn it once and it works for everything.

What your real bank will never ask you for

Remember this list, because it is the quick test when you are in doubt:

• Your PIN, your full password or your app login details. Your real bank may ask you to identify yourself in ITS app or on ITS website; it will never ask you to read out your passwords over the phone or send them by SMS.
• The OTPs (one-time PINs) sent to you by SMS. Those codes approve transactions. Anyone who asks you for one over the phone is trying to get you to approve a transaction that THEY started. This is the central trap of almost all bank phone scams.
• To install a remote-access app (AnyDesk, TeamViewer and the like) "so we can help you". No bank does that. It is the step before they empty your account in front of your eyes.
• To make a "test" payment or move your money "to a safe account". Payments you make yourself are very hard to reverse. Your bank will never ask you to move money over the phone to protect you.
• To stay on the line no matter what. "Don't hang up, it's urgent, if you hang up the payment will go through." Rushing you is the scammer's tool. Your real bank would rather you checked than obeyed quickly.

The most common versions and their script

• The transaction you do not recognise. "There is a R8 000 purchase at an electronics store. Do you recognise it?" You say no, and they guide you to "reverse" it: install something, give codes, make a transfer. All the theatre after your "no" is the scam.
• The account blocked by SMS. A link to a website identical to your bank's, where you enter your username and password. From that moment, they are in control.
• The fake employee who "protects" you. Friendly and professional, with your basic details (your name, part of your ID number, the last digits of your card: all of that circulates after data breaches). Professionalism proves nothing; only the channel proves anything.
• The disguised approval. They ask you to approve a notification in your banking app "to verify your identity" or "to cancel the fraud", and it is actually a payment, a cash-send or a new device being linked to your profile. Always read what you are approving in the app.

What to do if you already gave details or codes

1. Call your bank's fraud line immediately (the number on the back of your card) and explain what happened. Ask them to block your cards, stop pending transactions and change your login details.
2. If your cellphone suddenly loses all signal after a call like this, contact your network straight away (from another phone if you have to): it may be a SIM swap, which lets criminals receive your OTPs. Ask your bank and your network about SIM-swap protection. If your network let someone swap your SIM without proper checks and does not resolve your complaint, you can take it to ICASA, the communications regulator.
3. Check your transactions over the following days, with notifications switched on in the app.
4. Open a case at your nearest police station (SAPS) with screenshots and the caller's number, and ask for the case number: your bank may ask for it.
5. Report the number in the spam numbers directory so that it gets flagged.
6. You will find more about trying to get money back, with realistic expectations depending on how you paid, on our blog.

Quick questions

Doesn't the number on the screen prove that it is my bank? No. Caller ID can be faked (this is called spoofing), and scammers do it precisely with real bank numbers so that a quick search makes them look genuine. That is why the rule is never to decide inside the call.

What if they already know my name, my ID number and my balance? Personal details circulate after data breaches, and a balance can be vaguely invented ("a large amount"). Knowing things about you does not make them your bank. Use the method anyway.

Can I ask them for something to check them myself? You can ask for the consultant's name and a reference number... and then hang up and call the bank yourself to check. Any "check" that happens without hanging up proves nothing.

Will my bank mind if I hang up on them? No. Hang up without guilt and call back on the official number. That is exactly what its fraud team wants you to do.

Keep the rule in one sentence: if your bank contacts you, do nothing there; hang up, open the official channel yourself and check. Share it with the people around you: that one sentence can save a lot of money.