Types of Robocalls
Bank impersonation robocalls
“We’ve detected suspicious activity on your account.” Sometimes that’s your real bank’s fraud alert. More often it’s a scammer impersonating your bank to drain it. The difference decides whether you verify and move on, or report a scam before it costs you.
Free · No obligation · About 2 minutes · No fee unless you recover
Short answer
Most “suspicious activity on your account” robocalls are bank-impersonation scams designed to trick you into reading back codes, passwords, or card numbers. The scammers are anonymous and use spoofed caller ID, so there’s usually no real company to sue. You report and protect your accounts. Separately, a genuine fraud alert from your actual bank is often legal and consented, because you typically agreed to those alerts when you opened the account. The key is telling the impersonator from the real thing.
The short version
- A real fraud alert from your bank is usually legal. You generally consented to it when you opened the account.
- A call that asks you to read back a code, PIN, or password is a scam; real banks don’t need you to do that.
- Bank-impersonation scammers are anonymous and spoofed, so there’s typically no company to sue. You report them.
- When in doubt, hang up and call the number on the back of your card, never the number that called you.
Two very different calls that sound alike
The phrase “suspicious activity on your account” gets used by both your real bank and the people pretending to be it. The difference is what happens next:
- A real fraud alert typically asks you to confirm whether you made a charge: “Did you spend $200 at this store? Reply yes or no.” It doesn’t ask for your full password, PIN, or the one-time code it just texted you.
- An impersonation scam pushes you to “verify your identity” by reading back a one-time code, your card number, your online-banking password, or by moving money to a “safe account.”
How to spot the impersonator
Red flags that the friendly “fraud department” is actually a scammer:
- They ask you to read back a verification code your bank just sent.
- They want your full card number, PIN, password, or login.
- They tell you to move money to a “safe” or “holding” account to protect it.
- They create panic and urgency: “act now or you’ll lose everything.”
- The caller ID looks like your bank but the request feels off, because caller ID can be spoofed.
Your real bank can already see your account; it doesn’t need you to hand over the keys.
Why scam versions are reported, not sued
The TCPA lets you sue real, identifiable companies that robocall your cell without consent. Bank-impersonation scams don’t fit: anonymous fraudsters run them, often overseas, hiding behind spoofed numbers.
With no nameable, suable company at the other end, a TCPA lawsuit usually isn’t realistic. The right response to a bank-impersonation call is to protect your accounts and report it, as our guide on how to report a robocall explains, rather than try to sue a ghost.
When a bank-related call might actually be suable
Real banks and the vendors they hire can cross the line, and that’s where the TCPA comes back into play:
- Marketing calls. A genuine fraud alert is usually consented to, but a bank (or its marketing vendor) robocalling or texting your cell to push new products without your written marketing consent can be a violation.
- Calls after you said stop. If you told a bank or collector to stop calling and the automated calls keep coming, that can be a prerecorded-call violation.
- Wrong-number calls. Automated bank or collection calls meant for someone else, landing on your cell, can also qualify. See wrong-number robocalls.
Those involve a real, nameable company, which is what makes them suable at $500 to $1,500 per call.
What to do when your ‘bank’ calls
One habit protects you in almost every case:
- Don’t trust caller ID. It can be faked to show your bank’s name or number.
- Never read back a code or share a password/PIN. Real banks don’t ask for those by phone.
- Hang up and call the number on your card. Verify directly whether there’s really an issue.
- Report scams to the FTC and FCC, and tell your bank. See how to report a robocall.
- If a real bank or vendor is robocalling you with marketing, after you said stop, or on a wrong number, get a free review. That may be a TCPA case.
Related: Types of illegal robocalls · Wrong-number robocalls · How to report a robocall · Prerecorded-call violations
How it works
Three steps. No cost to find out. No obligation to go further.
Tell us what happened
Answer a few plain-English questions about the calls or texts. It takes about two minutes.
Max reviews it free
Max Morgan’s team looks at your answers and tells you, honestly, whether you have a claim worth pursuing.
If you qualify, he fights for it
You pay nothing up front and nothing unless you recover. Max handles the case.
Bank impersonation robocalls: FAQs
How do I tell a real bank fraud alert from a scam?
A real alert usually asks you to confirm a charge with a simple yes or no and never asks you to read back a code, password, or PIN. A scam pushes you to ‘verify’ by sharing codes or to move money to a ‘safe account.’ When unsure, hang up and call the number on the back of your card.
Can I sue a scammer who pretended to be my bank?
Usually not. Bank-impersonation scammers are anonymous and use spoofed numbers, so there’s no real company to identify and serve. Protect your accounts and report the call to the FTC, the FCC, and your bank rather than try to sue.
Are my real bank’s automated fraud alerts legal?
Generally yes. You typically agreed to account and fraud alerts when you opened the account, which counts as consent. Where it can cross the line is automated marketing calls you didn’t agree to, calls that continue after you said stop, or automated calls meant for someone else landing on your phone.
My bank keeps robocalling me about offers I never signed up for. Can I do something?
Possibly. A real bank or its marketing vendor robocalling or texting your cell with promotions without your written marketing consent can be a TCPA violation worth $500 to $1,500 per call. Because it’s a nameable company, it may be worth a free review.
Find out in about two minutes
See if your calls are worth money.
Answer a few questions and Max Morgan, Esq. will tell you, free, whether you have a case. No cost, no obligation, no fee unless you recover.