High riskBank & Payment

Callback Phishing Scam

In this scam, an email or text about a charge, order, or security issue urges you to call a number, where a fake agent talks you into sharing details, installing remote access, or moving money.

Quick verdict

Risk level
High risk
Scam type
Telephone-oriented attack (callback)
Main red flag
A message about a charge or issue that urges you to call a number to dispute or fix it.
What to do first
Do not call. Verify through official accounts and contact details only.

How this scam works

In this scam, an email or text about a charge, order, or security issue urges you to call a number, where a fake agent talks you into sharing details, installing remote access, or moving money.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

In short, the giveaway is usually simple: A message about a charge or issue that urges you to call a number to dispute or fix it. Do not call. Verify through official accounts and contact details only.

Scammers rotate tactics constantly, the same operation may also run the Geek Squad Renewal Email Scam and the Payment Confirmation Email Scam. See the full Bank & Payment Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • A message urging you to call a number to dispute or fix something
  • A charge or issue you cannot verify
  • Pressure to call within hours
  • An agent asking for remote access or payment
  • A number not from the official company

What the message looks like

Example pattern, not a real report
Example pattern: 'You were charged $499 for a subscription. To cancel, call this number within 24 hours: [number].' The 'agent' is a scammer.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: A message about a charge or issue that urges you to call a number to dispute or fix it.

The scale of it

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
Source: US Federal Trade Commission
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

How to protect yourself

  • Verify any charge or issue through your official accounts
  • Find contact numbers on official websites, not the message
  • Hang up if asked for remote access or unusual payment
  • Report and delete the message

Already responded? Do this now

  • If you called and installed software, remove it and run a scan
  • If you shared card or bank details, contact your bank immediately
  • Change passwords from a trusted device if you gave access
  • Watch for follow-up 'refund' calls

Mistakes to avoid

  • Do not call numbers in unexpected messages
  • Do not install software a phone 'agent' requests
  • Do not grant remote access to your device

Related scams to know

High risk Email

Geek Squad Renewal Email Scam

This scam emails a fake Geek Squad or tech-support 'renewal invoice' for a subscription you do not have, urging you to call a number where a fake agent talks you into refunds, remote access, or payments.

Created by Scam or Safe Editorial Team
High risk Email

Payment Confirmation Email Scam

This scam emails a fake payment or order confirmation for something you did not buy, prompting you to call a number or click a link to 'cancel' or 'dispute' it, leading to a scammer or a phishing page.

Created by Scam or Safe Editorial Team
High risk Bank & Payment

Bank Impersonation Phone Scam

In this scam a caller pretends to be your bank's fraud team, claims your account is under attack, and pressures you to move money to a 'safe account', read out one-time codes, or grant remote access so they can steal your funds.

Created by Scam or Safe Editorial Team

Common questions

Why do scammers want me to call?
A phone call lets them apply pressure and talk you into sharing details, installing remote access, or moving money, away from written scrutiny.
How do I verify a charge?
Check your real accounts and statements directly, and use contact numbers from official websites, not the number in the message.
I called and gave access. What now?
Remove any software, run a scan, contact your bank if you shared details, change passwords from a trusted device, and watch for follow-up calls.
How is this different from a bank impersonation call?
Here, the scammer gets you to call them via a message, rather than calling you. The defence is the same: verify through official channels.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.