📞 Vishing Scams UK — Fake Bank Calls Explained

Sunday, 02 August 2026

Vishing (voice phishing) is a scam delivered by phone call. A caller claims to be from your bank, the police, or a trusted company — and talks you into handing over card details, one-time codes, or transferring money.

It's one of the most dangerous scams in the UK because a convincing voice disarms your defences. Here's how the calls work and how to end them in seconds.

The main vishing scams

Scam The call
"Fraud team" call "This is your bank's fraud team — we've spotted unusual activity" → they need your details to "stop" it
One-time code call "Confirm the code we just texted you" → they use it to log into your account
The courier fraud call "Police here — a rogue employee at your bank needs catching. Help us by handing over your card"
Refund call "You're owed a refund — confirm your card details"
Tech support call "Your computer has a virus — we need remote access" (also see tech support scams)
Spoofed number The caller ID shows a real bank number — but it's spoofed

How a vishing call works

  1. The setup. You answer. The caller ID looks right (spoofed) or the caller knows your name, address, and recent transactions (from data breaches).
  2. The story. Urgent fraud on your account, a suspicious payment, a "rogue employee" — something that demands immediate action.
  3. The ask. They need you to "verify" — read back a one-time code, confirm card details, or move money to a "safe account".
  4. The damage. The code or details let them drain your account. The "safe account" is theirs.

⚠️ The golden rules: (1) Your bank will never ask you to read back a one-time code. (2) Your bank will never ask you to move money to a "safe account". (3) The police will never ask you to hand over your card or PIN. (4) If in doubt, hang up and call the number on the back of your card.

The red flags

  • ⚠️ They ask for a code — any code sent to your phone is yours alone
  • ⚠️ "Safe account" — there's no such thing; it's the scammer's account
  • ⚠️ Urgency — "your account will be closed", "money is being taken now"
  • ⚠️ Secrecy — "don't tell anyone at the bank" or "don't hang up"
  • ⚠️ They stay on the line — so you can't verify with someone else
  • ⚠️ They ask you to install an app — remote access or "security" apps
  • ⚠️ They know details about you — from breaches, not because they're legit
  • ⚠️ Payment by transfer or gift card — see gift card scams

What to do if you get a suspicious call

  1. Hang up — immediately. Don't press buttons, don't say "yes", don't argue.
  2. Wait 5 minutes — then call your bank on the number on the back of your card (spoofed calls can stay connected if you call back immediately)
  3. Call from a different phone if possible — fraudsters can keep the line open
  4. Report it to Action Fraud — 0300 123 2040 or actionfraud.police.uk
  5. Report the number — even if you hung up, report it

If you've already given details

  1. Call your bank's fraud line immediately — cancel the card, freeze the account
  2. Report to Action Fraud — get a crime reference number
  3. If you transferred money, tell the bank it was a scam — see how to get your money back after a scam
  4. If you installed an app, uninstall it and run a malware scan — see access device fraud
  5. Change your banking passwords if you shared any

Protect yourself

  • ✅ Never read back one-time codes — to anyone, for any reason
  • ✅ Never move money to a "safe account" — it doesn't exist
  • ✅ Never install apps a caller tells you to install
  • ✅ Call back on the official number — from the back of your card or the official website
  • ✅ Register with the Telephone Preference Service (TPS) to reduce cold calls
  • ✅ Set up "silence unknown callers" on your phone
  • ✅ Tell older relatives — vishing targets them hardest
  • ✅ Set a family code word for anyone claiming to be family

Related guides

CyberAware UK — helping families report crime, recover from scams, and stay safe online.