FBI Alert: Bank Impersonation Scams Hit $262M in Losses
Quick Answer: The FBI has issued a public alert (IC3 PSA I-112525) warning that bank impersonation scams have generated over 5,100 complaints since January 2025, with losses exceeding $262 million. Scammers pose as bank employees via calls, texts, and emails to steal login credentials and drain accounts, often routing funds to cryptocurrency wallets that are nearly impossible to trace.
Your phone rings. Caller ID says it’s your bank. A professional-sounding representative tells you your account has been compromised and they need to verify your identity. Every instinct says to cooperate. That instinct could cost you everything.
The FBI’s Internet Crime Complaint Center (IC3) has issued a formal public service announcement warning Americans about a surge in account takeover fraud through bank impersonation. Since January 2025, more than 5,100 people have reported falling victim to these scams, with total losses exceeding $262 million.
And that number only counts the people who reported it.
The scammers aren’t sloppy amateurs anymore. They’re running professional operations that would fool most people, including me.— Steve Rhode
How the FBI Says This Scam Works
According to the FBI alert (IC3 PSA I-112525), criminals are impersonating bank employees through multiple channels — texts, phone calls, emails, and even fake bank websites that appear in search results.
The Daily Money Brief — Free, at 10 AM
Money you may be owed, scams to dodge, and the fine print decoded — the consumer money news that affects your wallet, every weekday.
Here’s the typical sequence:
- You receive an urgent text, call, or email that appears to come from your bank
- A “bank representative” claims your account has been compromised
- They ask you to “verify” your identity by providing login credentials, multi-factor authentication (MFA) codes, or one-time passcodes
- Once they have access, they transfer your funds — often to cryptocurrency wallets that are extremely difficult to trace or recover
Warning: Some scammers go a step further — after posing as your bank, they follow up by impersonating law enforcement, FBI agents, or government agencies to pressure you into silence or further compliance. As of January 2026, this layered impersonation tactic is on the rise.
The Numbers Are Staggering
In one case alone, 19 victims lost a confirmed $14.6 million — with the attempted theft reaching $28 million. That’s an average of over $768,000 stolen per victim in a single operation.
Roughly 25% of these scams now occur via phone, and an estimated 1 in 7 consumers — about 14% — report falling victim to some form of scam in the past year.
SEO Poisoning: Fake Bank Websites in Search Results
One of the more sophisticated tactics in this wave involves SEO poisoning. Criminals purchase ads or manipulate search rankings so that when you Google your bank’s name, the first result you click leads to a fake website designed to look exactly like your bank’s login page.
Key Insight: Never use search engines to find your bank’s website. Bookmark your bank’s real URL and always navigate directly to it. Those search results that look like your bank could be a scammer’s trap.
You type in your credentials thinking you’re logging in. Instead, you just handed them directly to criminals who are watching in real time.
What to Do If You’ve Been Targeted
If you’ve already provided information to someone you now suspect was a scammer, the FBI recommends these immediate steps:
- Contact your financial institution immediately. Request a recall or reversal of any unauthorized transactions. Ask for a Hold Harmless Letter or Letter of Indemnity — this protects you from liability for the fraud.
- Reset ALL compromised credentials. Change passwords for your bank, email, and any account that used the same login information. Do not reuse old passwords.
- File a complaint with the FBI at ic3.gov.
- Report identity theft to the FTC at IdentityTheft.gov.
- Monitor your accounts closely for unauthorized transactions over the coming weeks and months.
Need help figuring out your next step? Use the free Find Your Path tool to get personalized guidance on dealing with financial problems, including fraud recovery.
How to Protect Yourself
The best defense against bank impersonation scams is knowing that your bank will never call or text you asking for your password, MFA code, or one-time passcode. Period.
Do This
- Hang up and call your bank’s real number (from the back of your card or your statement)
- Enable multi-factor authentication on all financial accounts
- Bookmark your bank’s real website — navigate directly, never through search results
- Use unique, complex passwords for every financial account
- Monitor your accounts regularly for unauthorized activity
Never Do This
- Never trust caller ID — scammers can spoof any number, including your bank’s
- Never share passwords, MFA codes, or one-time passcodes with anyone who contacts you
- Never click links in unsolicited texts or emails claiming to be from your bank
- Never share personal details publicly (pet names, birthdays, etc.) — scammers use these for security questions
- Never assume a caller is legitimate just because they know your name or account details
Got a suspicious contract or agreement? Run it through the free Contract Decoder to identify hidden traps, fees, and red flags before you sign anything.
Why This Matters for People in Debt
If you’re already struggling with debt, a bank impersonation scam can be catastrophic. Losing thousands — or even hundreds — to fraud when you’re barely making payments creates a financial hole that’s incredibly hard to climb out of.
And here’s what really bothers me: the people most vulnerable to these scams are often the ones who are already in financial distress. They’re panicked about their accounts. They’re conditioned to respond immediately when someone says “your account has a problem.” Fear makes people compliant. Scammers know this.
Key Insight: Scammers exploit the same fear and panic that debt causes. If you’re in a financial crisis, you’re more susceptible to urgent-sounding calls. Take a breath. Hang up. Call your bank yourself. No legitimate bank employee will ever pressure you to act immediately on a phone call.
Sources
- FBI IC3 Public Service Announcement I-112525-PSA — Account Takeover Fraud via Impersonation of Financial Institutions (November 25, 2025)
- Bitdefender — FBI Warns Scammers Are Posing as Your Bank
- City National Bank — Important FBI Security Alert: Protect Your Accounts from New Scam Trends
- FTC IdentityTheft.gov — Report and recover from identity theft
Key Takeaways
- The FBI reports 5,100+ bank impersonation scam complaints with $262M+ in losses since January 2025
- Scammers impersonate bank staff via calls, texts, emails, and fake websites to steal your credentials
- Funds are routed to cryptocurrency wallets that are nearly impossible to recover
- Never trust caller ID — always hang up and call your bank’s real number from the back of your card
- If you’ve been targeted, contact your bank immediately and file reports with the FBI (ic3.gov) and FTC (IdentityTheft.gov)
Frequently Asked Questions
What is the FBI IC3 bank impersonation scam alert about?
On November 25, 2025, the FBI’s Internet Crime Complaint Center (IC3) issued Public Service Announcement I-112525, warning about a surge in account takeover fraud where criminals impersonate bank employees. Since January 2025, the FBI has received over 5,100 complaints with reported losses exceeding $262 million. Scammers use phone calls, texts, emails, and fake bank websites to trick people into revealing login credentials, MFA codes, and one-time passcodes, then drain accounts and route funds to cryptocurrency wallets.
How can I tell if a call from my bank is real or a scam?
Your bank will never call you and ask for your password, multi-factor authentication code, or one-time passcode. If you receive a suspicious call, hang up immediately and call the phone number printed on the back of your bank card or on your account statement. Do not call back any number the caller provides. Scammers can spoof caller ID to display your bank’s real number, so even if it looks legitimate, do not trust incoming calls requesting sensitive information.
What should I do if I already gave my bank information to a scammer?
Contact your financial institution immediately and request a recall or reversal of any unauthorized transactions. Ask for a Hold Harmless Letter or Letter of Indemnity. Reset all compromised passwords, especially for banking, email, and any accounts using the same credentials. File a complaint with the FBI at ic3.gov and report identity theft to the FTC at IdentityTheft.gov. Monitor all your accounts closely for unauthorized activity in the following weeks and months.
What is SEO poisoning and how does it relate to bank scams?
SEO poisoning is when criminals manipulate search engine results — through paid ads or search optimization techniques — to make fake bank websites appear at the top of search results. When you search for your bank’s name and click what appears to be the real website, you land on a convincing fake page designed to capture your login credentials. The FBI recommends bookmarking your bank’s real website URL and always navigating directly to it instead of using search engine results.
Can I recover money lost to a bank impersonation scam?
Recovery is possible but not guaranteed, especially when funds have been converted to cryptocurrency. Your best chance is to contact your financial institution as quickly as possible to request a recall or reversal. Filing with IC3 and IdentityTheft.gov creates official records that may help in recovery efforts. The sooner you act, the better your chances — some banks can freeze or reverse transactions if reported within hours. Request a Hold Harmless Letter from your bank to protect yourself from being held liable for the fraudulent transactions.
The Bottom Line
Bank impersonation scams are sophisticated, fast-moving, and devastatingly effective. The FBI’s $262 million loss figure only captures what’s been reported. If your bank contacts you with an urgent request — stop, hang up, and call them yourself using the number on the back of your card. No real bank employee will ever ask for your password or authentication codes over the phone. Your instinct to cooperate is exactly what scammers are counting on. Trust the math, not the panic.
Dealing With Debt? Understanding your options is the first step. See how all your debt relief options compare — including ones most sites won’t tell you about. The Find Your Path quiz gives a recommendation based on your actual numbers, and the Scam-O-Meter checks any company’s complaint history before you sign. Federal Reserve research shows bankruptcy filers recover faster than those who don’t file.
