“Bank security” phone calls: how to spot the scam

What a typical call sounds like

A polite person calls, introduces themselves as an employee of the bank's security service and uses your name. Then comes one of the phrases the Ukrainian cyber police list as the most common:

“Your card has been blocked.”
“Someone is trying to make a suspicious transaction from your account.”
“We are running a customer check.”
“New rules apply under martial law.”

The goal of the call is always the same: to scare you and make you act fast, before you have time to think. A few minutes in, you will be asked to “confirm your identity” with card details, read out an SMS code, install a “protection” app or move money to a “reserve account”.

Four signs that give a scammer away

1They call you firstA real bank rarely calls you out of the blueHang up
2They rush and scare you“Urgently, or your money will disappear”Hang up
3They ask for codesCVV, PIN, SMS code, banking passwordHang up
4They ask for a transferTo a “safe account”, or to install an appHang up

Any one of these signs is enough to end the call and phone the bank yourself using the number on your card or in the official app.

1. They call you first

A bank may send a message in the app or an SMS, but card security issues are usually handled in the app or when you call the hotline yourself. Any unexpected call “from the bank” is a reason to be on guard.

2. They rush and scare you

“Urgently”, “your money is about to disappear”, “don't hang up or the account will be blocked”. A real bank does not need you to decide in 30 seconds. Scammers do.

3. They ask for secret details

The cyber police stress that genuine employees of banks and government agencies never ask for your CVV, card expiry date, one-time SMS passwords or online banking login details. Under no circumstances, wartime included.

4. They ask you to move money or install an app

“Safe account”, “reserve card”, “verification account”: no such accounts exist. In the same way, never install apps at the caller's request: remote access tools give the scammer full control of your phone, banking app included.

Why even careful people fall for it

Scammers follow a script tested on thousands of calls. They know your name, sometimes the last digits of your card or the name of your bank: such data often leaks from databases or classified ads. This creates the feeling that the bank really is calling.

Then the pressure starts. A person told that their money is about to vanish thinks about how to save it, not about whether the caller is genuine. Scammers deliberately allow no pause: don't hang up, we are already blocking the transaction, read out the code so we can make it in time.

That is why the best protection is a rule decided in advance, not quick thinking in the moment. If you already know that a bank never asks for codes, hanging up takes no deliberation.

What to do during the call

End the call. No explanations and no “checks”. Politeness is not required here.
Don't give or confirm anything. Even a “yes” to “is this your card?” can become part of the scheme.
Call the bank yourself using the number on the back of your card, on the official website or in the app. Not a number dictated over the phone.
Check your transactions in the app. If you see anything unfamiliar, block the card in the app right away.

What to do if you have already shared details or sent money

Minutes count here. Act in this order:

Block the card in the app or through the bank's hotline.
Report the fraudulent transaction to the bank and ask to dispute it. The sooner the bank knows, the better the chance of stopping the transfer.
Change your passwords for online banking and email if you shared them or installed an app at the scammers' request. Delete that app.
Contact the cyber police: file a report at ticket.cyberpolice.gov.ua or at the nearest police station. Keep the number that called you, the time of the call and screenshots of the transactions.

How to protect yourself in advance

Set limits on transfers and online payments in your banking app. Keep large sums in a separate account or deposit, not on the card you use for daily shopping.
Turn on notifications for all transactions so you see any debit straight away.
Use a dynamic CVV if your bank offers one: the code changes and is useless to a scammer a second time.
Ask your mobile operator to block remote SIM replacement. Then scammers cannot intercept your SMS codes.
Talk to your parents and grandparents. Older people are targeted by these calls more often. Agree on a simple rule: no codes and no transfers because of a phone call; call you first.

Other common scams

Scheme	What they say	What to do
“Relative in trouble”	A message or call in the name of someone close: they are in trouble and need money urgently	Call the relative back on a number you know
“Payment from the state or a fund”	A link to a site where you must enter card details to receive aid	Check payments only in Diia and on official websites
“Buyer from a classified ad”	Wants to pay for your item and asks for card details or sends a link “to receive the money”	To receive a transfer, your card number is enough; nothing else is needed
“Investment with guaranteed income”	A call offering to make money on the stock market or crypto with a high guaranteed return	There is no such thing as a guaranteed high return. Hang up

In short

A bank never asks for your CVV, PIN, SMS codes or passwords, never asks you to move money to a “safe account” or install an app.
The number on the screen can be faked, so check by calling the bank yourself.
Four signs of a scammer: they call first, rush you, ask for codes, ask for a transfer or an app.
If you have already shared details: block the card, tell the bank, change passwords, contact the cyber police.
In advance: limits, notifications, a dynamic CVV, a block on remote SIM replacement and a talk with older relatives.

Sources

This article is for information only and is not financial or investment advice. Check current terms with your bank or financial institution before making decisions.