Risk:High — Fake bank support calls use convincing impersonation, synthetic voices and cloned branding to push small firms into unsafe transfers.
Install the app:Open the app and verify suspicious content in one scan.
Fake Bank Support Calls Target Small Businesses
A caller claims to be from your bank’s support team and says the business account is under immediate threat. The message may be: “This is bank support. Transfer the balance now while I secure the account.” The voice can sound polished, familiar or authoritative, and a follow-up link may open a page that closely copies the bank’s branding. The transfer, however, sends company money under the scammer’s control.
Why the call feels convincing
Impersonation and fake support scams remain highly active, with synthetic voices, deepfakes and brand-clone infrastructure making verification harder. The FBI warned in 2025 that scammers used synthetic voice to impersonate senior U.S. officials and target officials and their contacts. That warning was not specific to banks, but it confirms an important point: a realistic voice is not proof of identity. Small businesses are especially exposed because one sole trader or administrator may control payments without a second approver. The manipulation usually depends on:
- An authoritative support identity
- A convincing AI-generated or imitated voice
- Urgency that prevents independent checks
- A branded page supplied by the caller
- Instructions to transfer funds during the supposed emergency
Break the caller’s control
- End the call without transferring money or using any link provided.
- Contact the bank through the number on the physical card or a banking address you entered independently.
- Ask the bank to confirm whether any genuine alert exists and review recent transactions.
- Require a second person to approve unusual transfers, even when the caller appears to know business details.
If anyone acted on the call, notify the bank’s fraud team immediately and preserve the phone number, messages, payment details and cloned page address. A fraudulent transfer can disrupt payroll and suppliers, while misuse of an administrator’s identity can also damage customer trust.
Most common warning signals
- An unsolicited caller claims to be bank support and describes an immediate account threat.
- The caller treats a realistic, familiar or authoritative voice as proof of identity.
- You are instructed to transfer business funds while remaining on the call.
- A caller-supplied link opens a page that closely copies the bank’s branding.
- The caller creates urgency that prevents you from contacting the bank independently.
- A sole trader or administrator is pushed to bypass normal payment approval checks.
What to do now
- End the call without transferring money or following any link.
- Call the bank using the number on the physical card or a verified banking website.
- Ask the bank to review recent transactions and place appropriate protections on the account.
- Require a second approver for any unusual or urgent business transfer.
- Preserve call logs, messages, payment details and the address of any cloned page.
- Report any completed transfer to the bank’s fraud team immediately.
Sources
Further reading
- Account and Payment Recovery After Tax Refund Phishing
- Account and Payment Recovery Scam Defense Guide
- Romance Scam Prevention Guide for Crypto Fraud
FAQ
Can I trust the caller if the voice sounds like my bank contact?
No. A realistic or familiar-sounding voice can be generated or imitated, so end the call and contact the bank through a known, independent channel.
What if the caller says I must move the money to protect it?
Do not transfer it during the call. Banks may contact customers about suspicious activity, but a demand to move money to make it safe should be verified independently using the number on your card.
What should I do if my business already transferred money?
Call the bank’s fraud team immediately and ask whether the transfer can be stopped or recalled. Preserve call records, messages, payment details and any linked website, then follow official reporting guidance from the FTC or USA.gov.