A fake bank advisor does not only try to collect your information. In many cases, the goal is to make you approve the fraud yourself: adding a beneficiary, validating a transfer, confirming a card payment, reading out a one-time code, or accepting a request in your banking app. That is what makes this scam especially effective in 2026: it looks less like a technical breach and more like a trust manipulation.
Public sources describe the same pattern. Cybermalveillance.gouv.fr explains that the fraudster pretends to be a bank advisor or anti-fraud employee, sometimes with a spoofed number, then creates urgency to push the victim into confirming actions on the account. The Banque de France and ABE Infoservice also state clearly that a real bank employee will never ask for a code, password, login, or in-app approval over the phone.
The right reaction is therefore not to “handle the call quickly”. It is to break the pace imposed by the caller, take control of the channel, and verify every request before calling back or approving anything. This article complements our analysis of generative AI and voice cloning in phone spam and our practical guide on what evidence to keep after a fraudulent call.
Why the fake bank advisor scam still works
It combines three effective levers: pre-existing information, a reassuring script, and manufactured urgency. The caller may already know your name, your bank, part of your card number, or a recent payment context. They then claim a fraudulent operation is underway and tell you to act “immediately” to stop it. In reality, the action they request is what authorizes the fraud.
The most misleading part is that the victim often believes they are canceling an operation when they are actually confirming it. That is exactly what ABE Infoservice and Cybermalveillance highlight: one-time codes and banking-app approvals do not secure an abstract alert, they authorize a concrete transaction.
The 8 checks to apply before calling back or approving anything
1. End the call as soon as a banking approval is requested
If the caller asks for a code received by SMS, an approval in the app, a password, a login, or your card PIN, the call should stop immediately. French public financial authorities are clear on this point: a real bank advisor does not need those elements to secure your account.
The goal is not to debate with the fraudster. It is to stop the conversation before the pressure becomes harder to resist.
2. Never call back the displayed number, even if it looks like your bank
Phone spoofing can display a legitimate-looking number. Seeing your bank name or a familiar switchboard on screen is therefore not proof that the call is genuine. The Banque de France notes that stronger protections on some fixed lines since October 2024 did not remove the risk entirely, because fraudsters can still place calls from other lines, including mobile numbers.
The safer reflex is to call back through a channel you choose yourself: the number on the back of your card, the official banking app, your customer portal, or a number you already trust.
3. Verify the requested action, not just the claimed identity
A convincing scam often relies on who the caller claims to be. The more useful question is simpler: is the requested action normal? Approving a beneficiary, confirming a transfer, sharing a code, or handing over your card to a courier are not protective actions. They are actions that open access to your money.
Even if the script sounds professional, you still need to judge the request by what it actually does.
4. Refuse all time pressure
A fake bank advisor almost always imposes a fake deadline: “within two minutes”, “before the transfer goes through”, “otherwise your account will be blocked”. That urgency is part of the manipulation. A legitimate bank may ask you to stay alert, but it should not require you to bypass your own verification steps.
If the conversation pushes you to act too fast, treat that as a major warning sign. Hang up, wait a few minutes if needed, and contact your bank again through the official route. A real incident can withstand that delay.
5. Never hand your bank card to a courier or any third party
Cybermalveillance and the Banque de France describe a still-common scenario: once trust is established, the fraudster sends a supposed courier or “employee” to collect the victim's bank card at home, sometimes also asking for the PIN. No normal banking security process works that way.
Your card, codes, and authentication tools must stay under your control. Handing them to a third party turns suspicion into immediate compromise.
6. Preserve the useful evidence immediately
Write down the time of the call, the displayed number, the stated reason, the requested action, and any SMS messages you received. If you already interacted, take screenshots of the app, the message, or the call history before deleting anything.
That discipline helps with reporting, contesting transactions, and rebuilding the incident timeline. If you need a structured operating model, you can also review our real-time alerts page to improve internal detection around suspicious phone activity.
7. Contact the bank through a safe channel, then secure access
Once the call is over, contact your bank through the official app, the official website, or the number printed on your card. If you shared sensitive information or approved a request, act without delay: block the card if needed, change passwords, review added beneficiaries, and inspect recent transactions.
The order is simple: first re-establish contact through a trusted channel, then contain the risk, then document what happened.
8. If an operation was already approved, switch to incident mode immediately
Many victims hesitate because they feel embarrassed for believing the call. That is exactly when time matters most. Contact the bank, preserve the evidence, file a complaint if required, and use the relevant public support routes without delay.
The faster you document the incident, the easier it becomes to challenge the transaction and report the fraud. The worst reflex is to wait and “see what happens”.
Quick checklist before any callback
- Hang up if a code, password, or approval is requested.
- Never call back the displayed number.
- Use only an official channel you already know.
- Verify the requested action, not just the displayed identity.
- Refuse all manufactured urgency.
- Keep your card and security codes under your control.
- Preserve the useful evidence immediately.
- Move into incident response mode if any approval already happened.
FAQ
Can my bank ask for an SMS code to block fraud?
No. The official sources used here all state that a bank advisor will never ask for a validation code, password, login, or in-app approval over the phone.
Is the displayed number enough to prove the call comes from my bank?
No. The number may be spoofed. Hang up and call back through an official channel you selected yourself.
What should I do if I already approved an operation?
Contact your bank immediately through a safe channel, block the card if necessary, change the relevant access credentials, keep the evidence, and start the appropriate reporting or complaint process without delay.
Verified external sources: Cybermalveillance.gouv.fr - what to do in a fake bank advisor scam, ABE Infoservice - beware of fake bank advisor calls, Banque de France - payment fraud.
