High riskBank & Payment Scams

Callback Phishing Scam

In this scam, an email or text about a charge, order, or security issue urges you to call a number, where a fake agent talks you into sharing details, installing remote access, or moving money.

Quick verdict

Risk level
High risk
Scam type
Telephone-oriented attack (callback)
Main red flag
A message about a charge or issue that urges you to call a number to dispute or fix it.
What to do first
Do not call. Verify through official accounts and contact details only.

What this scam usually looks like

In this scam, an email or text about a charge, order, or security issue urges you to call a number, where a fake agent talks you into sharing details, installing remote access, or moving money.

Example message pattern

Example pattern — not a real report
Example pattern: 'You were charged $499 for a subscription. To cancel, call this number within 24 hours: [number].' The 'agent' is a scammer.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A message urging you to call a number to dispute or fix something
  • A charge or issue you cannot verify
  • Pressure to call within hours
  • An agent asking for remote access or payment
  • A number not from the official company

What to do

  • Verify any charge or issue through your official accounts
  • Find contact numbers on official websites, not the message
  • Hang up if asked for remote access or unusual payment
  • Report and delete the message

If you already clicked or replied

  • If you called and installed software, remove it and run a scan
  • If you shared card or bank details, contact your bank immediately
  • Change passwords from a trusted device if you gave access
  • Watch for follow-up 'refund' calls

What not to do

  • Do not call numbers in unexpected messages
  • Do not install software a phone 'agent' requests
  • Do not grant remote access to your device

Similar scams

Frequently asked questions

Why do scammers want me to call?
A phone call lets them apply pressure and talk you into sharing details, installing remote access, or moving money, away from written scrutiny.
How do I verify a charge?
Check your real accounts and statements directly, and use contact numbers from official websites, not the number in the message.
I called and gave access. What now?
Remove any software, run a scan, contact your bank if you shared details, change passwords from a trusted device, and watch for follow-up calls.
How is this different from a bank impersonation call?
Here, the scammer gets you to call them via a message, rather than calling you. The defence is the same: verify through official channels.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.