Feedback

Useful guidance on bank impersonation fraud and cyber security

31 October 2023      Ashley Shelbrooke, HEPA and Project Specialist

Criminals are increasing their efforts to impersonate bank colleagues and defraud clients. Barclays have shared some useful guidance on how you can spot an imposter and help keep your organisation safe.

Be alert if you receive a phone call or text message about:

  • concerns over suspected fraudulent transactions on your account;
  • the need to upgrade or download a new payment channel;
  • an issue with a legitimate outgoing or incoming payment.

Fraudsters may trick you into downloading software to assist with ‘the issue’ by either directing you to a site or asking you to log in to a ‘chat function’. These websites and chat functions may look like your bank, but they’re actually malicious sites designed to facilitate fraud.

By downloading the software, you’re giving the fraudster remote access to your computer. Your screen might turn black, or you may even be asked to turn off your screen to assist with the process. This lets the fraudster make transactions without your knowledge.

You could be asked to enter your PIN or use your biometric device to complete the process. In reality, you're authorising the payments set up by the fraudster.

For more information on this, watch Barclays short video here.

How you can protect your organisation

Impersonation fraud is on the rise and causing devastating losses. But there are things you can do to protect your organisation:

  • be extremely vigilant regarding any requests to visit web addresses, click on links or download software in order to resolve an issue.
  • set up dual authorisation for an extra layer of security. If you already have this in place, fraudsters may attempt to speak with the second authoriser to push the payment through or ask you to encourage them to do so.
  • If you experience any of the above scenarios, please hang up, disconnect from the internet and use a different phone line to contact your bank fraud team. Don’t call back using any numbers provided to you by the caller.

A bank will never:

  • ask you to make payments or move money to a ‘safe account’.
  • call and ask you to provide or enter your PIN or use your biometric device, for any reason.
  • take control of your computer.

A useful checklist

Barclays have also shared a useful checklist for internal controls. The handy single-page document can be downloaded here.



Read more



This site uses cookies and other tracking technologies to assist with navigation and your ability to provide feedback, analyse your use of the site and services and assist with our member communication efforts. Privacy Policy. Accept cookies Cookie Settings