Simulation 2 ยท Intermediate level

Bank number spoofing | when a text and a call work together

First a text warns about a suspicious transaction. Moments later, a number identical to your bank's helpline calls. Everything seems consistent | and that's exactly the trap.

Reading time: 6 min
A person checking a phone number before calling back

Two channels, one fake story

The scenario starts with a text: "A suspicious transaction was detected on your account. If this wasn't you, call the number below immediately." A moment later | or even without waiting for your reaction | the phone rings, and the screen shows exactly the same number as your bank's helpline. The voice on the other end is calm, talking about a "safety transfer" that needs confirming to protect your money.

It's no accident that both channels match. The scammer deliberately combines a text and a call into one consistent story, because they know that agreement between several sources significantly lowers a victim's guard. In reality, both elements | the text and the call | come from the same criminal.

How number spoofing technically works

A technique called spoofing lets someone set any number as visible to the recipient, regardless of where the call actually originates. Services enabling spoofing are cheap and widely available online, which means even small criminal groups use them.

This means the number on your phone screen | even if it exactly matches the number saved in your contacts as "Bank" | is no proof of the caller's identity. That's one of the most important things to take away from this article.

Why a "safety transfer" is never safe

In this scenario, the scammer asks you to confirm a transfer in your banking app, framing it as a way to "protect your funds" from an alleged threat. In reality, you yourself are approving a money transfer straight to the criminal's account. No genuine bank security mechanism ever requires a customer to confirm a transfer in order to protect their money | it always works the other way around.

What to do when you get a text and a call like this

  • Don't call back the number given in the text, and don't continue a call that reached out to you first
  • Hang up and call your bank yourself, using the number on your payment card
  • Never approve a transaction in your banking app that you didn't initiate yourself
  • Remember that a matching number on your screen proves nothing

How we practise this in the ODYSSEY course

In the "Recognise the scam" module you'll find a simulation of exactly this situation | you practise refusing to approve a "safety transfer" and verifying contact by calling back the official number instead of the one given by the caller.

Sources

  • National consumer financial protection agencies | warnings about phone number spoofing.
  • Banking associations | recommendations on identity verification during phone contact.

Practise it yourself

In the ODYSSEY course you go through an interactive simulation of exactly this situation | safely, at your own pace.

Go to Module 1