THREAT LIBRARY
SMS + PHONETarget: ANYONE WITH A BANK ACCOUNT
“Did you authorize a €499 charge?”
A fake bank alert, then a call from the “fraud department” that helps you send them your money.
How it looks
Text message · from BANKALERT
Security alert: Did you authorize a payment of €499.99 to AMZN MKTP? Reply NO if this wasn't you. A fraud specialist will contact you shortly.
RECONSTRUCTION — NAMES, NUMBERS AND DOMAINS ARE INVENTED. THE PATTERN IS REAL.
Where the hook hides
This one is a two-act play. Act one is fear: a charge you never made. Act two is relief: a calm, professional “fraud specialist” calls — often from a spoofed number matching your bank — and offers to reverse it.
The “reversal” they walk you through is the actual theft: an instant SEPA transfer to a “safe account”, or reading them the one-time code your real bank just sent you. The victim performs the transfer personally, which is exactly why it's so hard to undo.
Red flags — the three-second check
- 01Banks never call to move your money “to keep it safe”. Ever. That sentence alone ends the call.
- 02They ask you to read back a one-time passcode. Real staff never need it — that code IS your account.
- 03Pressure to stay on the line. Isolation is a tactic: they don't want you calling the real bank.
- 04Caller ID matching your bank proves nothing — spoofing a number or sender name costs nothing.
- 05You replied NO and got a call. Real fraud teams resolve alerts inside the app, not by callback theater.
Already hooked? Do this now
- 01Hang up. Call the number on the back of your card or in the official app — never the number that called you.
- 02If money moved by instant transfer, minutes matter: demand your bank attempt a recall immediately.
- 03If you read out a code, assume the account is compromised: reset passwords, review trusted devices.
- 04Report it to your bank and your national cybercrime portal — reports build the cases that shut these crews down.
Check your reflexes
Reading about it is not the same as catching it live. See whether this one would get past you.