Phone Scams

You Got a Call From Your "Bank." Here's the Four-Second Test That Tells You If It's Real.

July 29, 2026 8 min

# You Got a Call From Your "Bank." Here's the Four-Second Test That Tells You If It's Real.

The number on your screen says Chase. Or Wells Fargo. Or your credit union. The caller knows the last four digits of your card. They say your account has been compromised and they need to verify your identity before they can protect you.

Before you say another word — do this.

Hang up. Call the number on the back of your card.

That is the four-second test. Everything else in this article is explanation.

## Why caller ID means nothing

Spoofing a phone number takes about thirty seconds and costs nothing. There are services that will display any number you want on a recipient's screen — including the exact fraud hotline number printed on the back of your Visa card.

This is not a technical vulnerability your bank is working to fix. It is a limitation of how the phone network was designed in the 1970s, before anyone imagined it would need to be fraud-resistant. The calling party provides the number that gets displayed. The receiving network generally trusts it.

Your bank is aware of this. That's why every real bank explicitly tells its customers: we will never ask you to verify your full account number, your PIN, your online banking password, or your Social Security number over an inbound call. If someone calls you and asks for any of those things, the call is not from your bank.

## What the scam actually sounds like

The Federal Trade Commission has published recordings. Here is the structure, almost every time:

Opening: Something is wrong. There has been suspicious activity. A large transfer is pending. Your card was used in another state. Something requires your immediate attention.

Urgency: You need to act now or the fraud will go through. Your account may be temporarily suspended while they investigate. The window to stop the charge is closing.

Verification request: Before they can help you, they need to confirm your identity. Can you verify your full card number? Your PIN? Your Social Security number? The one-time code they just texted you?

That last one — the one-time code — is especially important. If someone calls you and asks for the six-digit code that just appeared on your phone, hang up. That code is a login or account-change verification for your actual account. They are using it to get in while you're on the phone with them.

## The four-second test, explained

When you hang up and call the number on your card, you are doing three things:

First, you are removing the spoofed number from the equation. You are now calling a number you verified independently, not a number someone else gave you.

Second, you are breaking the urgency. Scammers rely on keeping you on the line and moving fast. Hanging up interrupts that. Every second you have to think is a second the script loses its grip.

Third, you are testing the original claim. If your account genuinely had suspicious activity, the fraud team you reach through the verified number will know about it. If they don't, the original call was fabricated.

You may need to wait on hold. That is fine. That hold music is protecting you.

## What real bank fraud calls actually look like

Real bank fraud departments do call customers. This is worth saying clearly, because the scam works partly by mimicking a legitimate process.

Here is what distinguishes a real call:

If the person on the phone reacts badly to you saying "let me hang up and call the number on my card," that reaction is your answer.

## The escalating version: when they stay on the line

Some scammers have an answer for the hang-up-and-call-back approach. They tell you the lines are compromised. They tell you the fraud is coming from inside the bank. They give you a "special secure number" to call instead of the one on your card.

Do not call the special number. Do not trust the claim that the main line is compromised. Your bank's fraud hotline is not compromised.

If you're genuinely unsure whether the line you're on is safe, hang up, wait two minutes, and use a different phone to call the number on your card. A different device eliminates any concern about the call being intercepted.

## If you already gave them information

If you've already provided account numbers, verification codes, your Social Security number, or anything else to someone you now believe was not actually your bank:

Call your bank immediately using the number on your card. Tell them what happened and what information you shared. They can freeze the account, reverse any unauthorized transfers that haven't settled, and flag the account for monitoring.

Move fast. Wire transfers and ACH payments can sometimes be recalled within 24 to 48 hours. After that, recovery becomes much harder.

File a report with the FTC at reportfraud.ftc.gov. This creates a record that can help with fraud disputes and identity theft recovery.

Check your credit. If you gave out your Social Security number, place a fraud alert with all three bureaus (Equifax, Experian, TransUnion) or consider a credit freeze. Both are free and can be done online in a few minutes.

## The call you should actually be worried about

The most dangerous version of this scam is not the aggressive one. The aggressive one — the caller who pushes hard and gets angry when you hesitate — is actually easier to resist because the pressure itself is a signal.

The version that works is the patient, helpful one. A calm voice. A plausible explanation. A tone that sounds exactly like a customer service rep you've talked to before. Someone who doesn't rush you, answers your questions, and makes the whole thing feel routine.

That version takes its time. That version builds enough trust that hanging up starts to feel rude, or overcautious, or like you're slowing down a process designed to help you.

Hang up anyway. Call the number on your card.

You can be polite about it. "I'm going to call back on the number I have on file — I'm sure you understand." Any real bank representative will say: absolutely, of course.

Four seconds. Then you'll know.

Not sure if something is a scam? Run it through Scamanot — free checks available, no account required.

Check Something Now