Fake Bank & Government Messages
Impersonated institutions send messages to steal money, credentials, or identity information.
What it is
These scams impersonate institutions whose authority can make you comply quickly. Stories include frozen bank accounts, unpaid taxes, benefit problems, or refunds. The requested action may steal money, credentials, or identity documents. Genuine institutions can send messages, but an official logo, caller ID, or reference number does not prove a particular contact is legitimate.
How it works
The scam introduces a crisis and routes you to a copied portal or a caller acting as an investigator. The attacker may know personal details from a breach. A bank impersonator can ask for a transfer to a 'safe account'; a government impersonator may demand gift cards or unusual payment methods to avoid penalties.
How people get tricked
Fear of legal consequences or losing access to savings makes people obey before checking. A promised refund can be equally persuasive. Attackers may insist that verification would interfere with an investigation or that you must not tell anyone.
Example scenario
A caller knows your address and says your funds must be moved immediately. You independently call the bank using the number on your card and learn there is no such instruction.
Warning signs
- Requests for secrecy, urgent transfers, or payment through gift cards or cryptocurrency.
- Requests to reveal full credentials, recovery codes, or remote access.
- The supposed institution discourages you from using its normal contact channels.
How to protect yourself
- ✓ Open the institution's verified app or website to check the claim.
- ✓ Call using a number from a trusted statement or official directory.
- ✓ Do not move funds or share codes based on unsolicited contact.
- ✓ Verify document-upload requests and send only what is necessary through the official process.
If it happens to you
If money was sent, contact your financial provider immediately and describe the scam. If credentials or identity records were disclosed, secure the affected accounts and follow local identity-protection guidance. Keep the message and transaction details for the relevant institution and reporting authority.
Know this now
Authority is a claim, not verification. A genuine institution can be reached through a channel that does not depend on the caller.