Consumers reported losing nearly $1 billion to bank impersonators in 2025, part of a broader $3.5 billion in imposter scam losses tracked by the Federal Trade Commission. The scheme is consistent and effective: a caller claims to be from the victim’s bank, warns of suspicious activity on the account, and urges an immediate transfer to a “safe” account. No legitimate bank operates that way, and the money rarely comes back.
How fake security alerts fuel a billion-dollar fraud pipeline
The FTC’s latest data release, published in June 2026, confirmed that bank impersonators accounted for the highest reported losses among all business impersonation categories in 2025. The pattern is specific: victims receive a fake security alert, often appearing to come from their own bank, telling them their funds are at risk. The caller then walks them through transferring money to an account the scammer controls.
These alerts arrive by phone, text, email, or in-app message, usually framed as urgent and confidential. The message may reference a real-looking transaction, claim a new device just logged in, or say the account will be frozen within minutes unless the customer acts. Once the victim responds, the scammer escalates to a live call, often spoofing the bank’s phone number so the caller ID looks legitimate.
From there, the script is polished. The impersonator instructs the victim to open their banking app or log in on a computer, then narrates each step of the transfer. They may say the funds are being moved to a “federal holding account,” a “shadow account” used to trap criminals, or a “secure wallet” that only the bank can access. In reality, the destination is a mule account or cryptocurrency wallet the scammer controls. By the time the victim realizes what happened, the money has usually been layered through multiple transfers and is effectively gone.
The hypothesis that banks filing more suspicious activity reports would see a measurable drop in successful transfer losses within 12 months is appealing but hard to test. FinCEN publishes SAR filings by industry, and depository institutions do file at scale. But those reports lack a specific subcategory for “move your money to protect it” schemes, making it impossible to isolate impersonation-driven transfers from other flagged activity. The Consumer Financial Protection Bureau has noted that SAR dollar amounts may reflect funds at risk rather than confirmed losses, which further clouds any direct comparison to FTC complaint data. Higher SAR volume signals that banks are documenting more suspicious transactions, yet no public dataset currently links that documentation to reduced consumer losses from this specific fraud type.
FBI warnings and the Phantom Hacker playbook
Federal law enforcement has given this fraud pattern a name. FBI field offices in El Paso and Phoenix issued public warnings about the Phantom Hacker scam, describing it as a multi-stage impersonation scheme. In the first stage, a caller poses as tech support and convinces the target that their computer or accounts have been compromised. A second caller then impersonates a bank representative, reinforcing the urgency. In some cases, a third caller claims to be a government official. Each handoff builds pressure and credibility, steering the victim toward transferring funds under the pretense of protection.
What makes these operations especially dangerous is how they blend psychological manipulation with technical tricks. Scammers may ask victims to install remote access software, letting them “demonstrate” fake account takeovers on screen. They might display bogus refund forms, then claim an overpayment that the victim must return immediately via wire or crypto. Every step is designed to keep the target on the phone and inside the scammer’s narrative until the transfer is complete.
The FBI’s 2025 Internet Crime Report added AI-related complaint and loss reporting for the first time, reflecting how voice-cloning and deepfake technology have made impersonation calls harder to detect. The bureau has separately warned that cryptocurrency and AI-enabled fraud schemes are costing Americans billions of dollars, though the public reporting does not break out how much of that total comes specifically from voice-cloned bank impersonation calls. For victims, the distinction is academic: when a familiar-sounding voice insists your savings are in danger, the emotional impact can override normal skepticism.
“Never move your money to protect it”
Against this backdrop, regulators have focused on simple, memorable rules for consumers. The FTC’s consumer guidance is blunt: if someone tells you to move your money to keep it safe, it is a scam. Real banks do not ask customers to transfer funds out of their accounts to “protect” them, do not pressure people to stay on the line while they move money, and do not demand secrecy from family members or branch staff.
Experts recommend a few practical defenses. First, treat every unsolicited security alert as suspicious, especially if it contains a link or phone number. Instead of responding directly, contact your bank using the number on the back of your card or the official website. Second, slow the interaction down: scammers rely on urgency, so any demand for immediate action, large transfers, or secrecy is a red flag. Finally, remember that you can always hang up and call back through a trusted channel, even if the caller ID appears to show your bank or a government agency.
Imposter scams thrive in the gaps between institutions: banks see unusual transfers but may not know the caller’s script; tech companies see spoofed domains and numbers but not the money movement; law enforcement sees losses but often only after the fact. Until those gaps are closed with better data sharing and real-time interventions, consumers remain the last line of defense. Learning to recognize the telltale demand to “move your money to protect it” may be the single most effective way to shut down a billion-dollar fraud pipeline before it reaches your account.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
