My bank called about fraud and I gave them the verification code, what now?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: What to do if you got scammed →
Act immediately: that call was almost certainly the scammer, and the code you read back likely let them approve a transfer or add a new payee. Real banks never phone you and ask you to read back a one-time code, that code is what stops fraud, not what confirms your identity. Call your bank on the number printed on your card right now, freeze the account, and reverse what you can.
Got a message like this? Paste it here →
This vishing scam targets everyday bank customers of all ages by exploiting the fear of losing money to fraud. It works because the caller poses as your own bank's fraud team, spoofs a familiar number, and frames reading back the code as protecting you, when it actually hands them the key to your account.
Illustrative example of the pattern, not a real message someone received.
How to verify it yourself
- Hang up and call the bank on the official number from your card or statement, never a number the caller gave you.
- Ask the bank to check for new payees, changed limits, or pending transfers made in the last hour.
- Confirm whether the caller's number was spoofed to look like the bank's, that alone doesn't make it real.
- Note the exact time and what you shared so the bank can trace and reverse it.
Common questions
Can the bank reverse the transfer?
Often yes if you call within minutes, banks can freeze accounts, recall recent transfers, and block new payees, so speed is the single biggest factor.
Why did they need my code if they already called me?
Because the code was the last barrier. The scammer had your other details but needed the one-time code to authorize a payment or log in, which is why no real bank ever asks you to read it back.
Should I change my online banking password?
Yes, immediately, and enable two-factor authentication, since the attacker may have your login. Do it from a device you trust.
Will the bank refund me?
It depends on your bank and how quickly you report, but reporting fast and filing with the FTC strengthens your case; authorized-push-payment protections may apply.
If you already responded
- Call your bank right now using the number on your card or official statement, and freeze the account or card.
- Ask them to reverse any recent transfer and remove any payee or device the scammer added.
- Change your online banking password and turn on two-factor authentication from a trusted device.
- Report the fraud at reportfraud.ftc.gov, and use IdentityTheft.gov if personal information was exposed.
- Watch for follow-up recovery scams, no legitimate service cold-calls you or charges a fee to "get your money back."
If you were already hit, expect a follow-up
One more thing to expect: after a scam, your details often land on lists that get reused, so you may be contacted again, sometimes by people posing as investigators, your bank's "fraud team," or "recovery agents" who promise to get your money back for an upfront fee. That follow-up is a second scam. No legitimate service charges a fee to recover funds.
Source: FTC, Got a call about fraud on your bank account? It could be a scammer