Bank fraud department voice spoof: identifying synthetic IVR phone scams

Take a breath: this happens to a lot of people, it isn't your fault, and there are steps that help.

Typical message

“This is your bank’s fraud prevention automated alert system. A suspicious charge of $1,420 was attempted on your debit card in Miami, FL. To block this charge, press 1 now...”

What to do now

1

Hang up immediately — never press numbers or speak

Do not follow automated prompts or give any information.

2

Call the real number on the back of your physical card

Manually dial the customer service phone number printed on your actual debit or credit card and ask if any fraud alert was triggered.

3

File a report with the FTC and your bank

Report the spoofed call details directly to the FTC at reportfraud.ftc.gov and to your financial institution.

4

Change your online banking password and enable authenticator 2FA

Replace SMS 2FA with hardware keys or authenticator apps (Google Authenticator, 1Password) that cannot be phished over the phone.

Frequently asked questions

Why did my phone display the real name of my bank?

Scammers spoofed the caller ID. Telephony networks traditionally trusted sender-provided caller ID information. Always hang up and dial the bank back directly.

What if I already entered my PIN on the call?

Call your bank’s official fraud hotline immediately to lock your debit card and freeze online banking access before funds are withdrawn at an ATM.