UK phone number search

The safe account scam: when your "bank" calls

By the StoryCheck team · 7 min read · Published 29 September 2026

There is no such thing as a safe account. If someone claiming to be from your bank's fraud team, another bank or the police tells you to move money to keep it safe, the call is a scam, whatever number is on your screen. In the UK, hang up, use a different phone if you can, and call 159 to reach your own bank's fraud team directly.

What does the safe account scam sound like?

The caller is calm, polite and well informed. UK Finance, the banking industry body, describes the standard script: fraud has been spotted on your account and your money must be transferred to a safe account to protect it, except that the criminal controls the receiving account. A police version asks you to help an undercover operation into "fraud at your branch". Criminals often research victims first, using details from earlier scams and data breaches, so a caller who knows your address or the last digits of your card has proved nothing.

Variations add pressure in other ways: a text that lands in the same thread as your bank's real messages, because sender names can be spoofed; a request to read out a one-time passcode; an app to install "so we can protect your account"; or a courier sent to collect your card, cash or gold.

How does 159 work?

159 is a three-digit number from Stop Scams UK that connects you straight to your own bank, much as 101 reaches the police and 111 the NHS. You reach the fraud team without relying on any number a caller gave you. More than 25 banks and building societies take part, among them Barclays, HSBC, Lloyds, NatWest, Nationwide, Santander, Monzo, Starling and Revolut, covering more than 99% of UK retail current accounts. It works on BT (including EE and Plusnet), O2 (including giffgaff), Three, Vodafone, Sky, TalkTalk and Virgin Media, among others, and calls are usually charged at the national rate, depending on your provider.

Two details make it safe. Stop Scams UK says 159 cannot be spoofed, and Mobile UK, the networks' trade body, points out that 159 will never call you, so a call claiming to come from 159 is itself a scam. As Mobile UK puts it, only a fraudster will object to you calling 159.

1. 1

   Hang up

   However urgent it sounds. A genuine fraud team can wait two minutes, and nothing is lost by checking.

2. 2

   Use a different phone if you can

   Take Five, the banks' fraud campaign, advises calling from a separate phone rather than the line the caller used.

3. 3

   Dial 159, or the number on your card or app

   Never a number from the call, a text or an email.

4. 4

   Tell the bank everything

   Including any codes you read out, apps you installed or payments you started.

Why does the call look like it comes from your bank?

Because the number can be faked. Spoofing lets a caller display any number, including your bank's real helpline, and Stop! Think Fraud warns that fraudsters can also spoof the sender of a text so that it appears in the same thread as genuine messages from your bank. The caller ID on your screen is not proof of anything.

This is also where a reverse lookup has limits worth knowing. If the screen shows an ordinary mobile or an internet number while the caller claims to be your bank, a lookup revealing a VoIP line with no history is a strong warning. If the screen shows your bank's genuine number, no lookup can prove the call did not come from it, which is exactly why 159 exists. Our guide to spotting a scam number covers the other signals.

Can you get the money back?

Usually, yes, if you act fast. Since 7 October 2024, bank transfers between UK accounts over Faster Payments or CHAPS have been covered by mandatory reimbursement: you can claim up to £85,000, you should report within 13 months, most claims are settled within five business days (up to 35 if the bank needs more information), and a bank can apply an optional £100 excess, but not to vulnerable customers. You will not be reimbursed if you were complicit or grossly negligent, and if your bank refuses, the Financial Ombudsman Service can review it.

Better still is never needing a refund. Confirmation of Payee, the name check your bank runs when you pay someone new, has been live since 2020 and runs more than two million checks a day, according to Pay.UK. When it says the name does not match, believe it over any caller.

Losses to bank and police impersonation are falling, but the harm is concentrated. Report Fraud says courier fraud reports rose to 1,891 in 2025, that around 65% of victims were in London and the surrounding counties, that people aged 76 to 96 made up about 62% of reports, and that criminals increasingly use WhatsApp and courier services, sometimes sending victims to several jewellers to buy gold.

What should you do if you have already acted?

1. Call your bank on 159 from a different phone and say you have been scammed. Speed matters more than anything else.
2. If you read out a code, tell the bank what it was for, because it may have approved a payment or a new device.
3. If you installed an app at the caller's request, disconnect from the internet, remove it and change your banking and email passwords from another device.
4. Report it to Report Fraud (formerly Action Fraud) at reportfraud.police.uk or on 0300 123 2040, or to Police Scotland on 101.
5. Forward any scam texts free to 7726, and report the call by texting CALL followed by the number to 7726.
6. Expect follow-up calls offering to recover your money for a fee. Stop! Think Fraud warns that genuine agencies never charge to recover money lost to fraud.