Bank Impersonation Scams: How One Target Wasted the Fraudsters' Time for Hours
A reader who received a fake Barclays automated call decided not to hang up. What followed is a useful case study in how these scams work and what you can do when one lands in your lap.
Key points
- Bank impersonation scams, where criminals pretend to call from your bank to steal account details, are among the most common fraud types reported to UK consumers.
- The reader targeted didn't even bank with Barclays, the institution the automated call claimed to represent.
- The fake call alleged an unauthorised payment of over £1,000 to Argos had been made from the target's account.
- Keeping fraudsters on the line wastes their time and stops them reaching other, more vulnerable targets.
- No regulator has opened a specific investigation into this incident; the pattern is well-documented by the Financial Conduct Authority (FCA), the UK body that oversees financial services firms.
One Sunday morning, just after 11am, a reader's phone rang. An automated voice claimed to be from Barclays Bank, warning of a suspicious payment of more than £1,000 to Argos. Two things were immediately wrong: the reader hadn't made any such payment, and they don't hold a Barclays account.
Criminals use recorded messages or live callers posing as bank fraud departments to manufacture panic, then persuade targets to hand over account numbers or one-time passcodes, the short codes banks send by text to confirm your identity. It's a formula. Scare first, extract second.
How does this kind of scam actually work?
The goal is to frighten you into acting before you think. A believable alert about a large unauthorised payment is designed to trigger alarm, and once you're alarmed, the caller's next step is to "help" you secure your account, which in practice means asking for the very details needed to empty it.
Rather than hang up, this reader played along. As first reported by The Guardian's Money section, they spent hours feeding the fraudsters invented account details and fictional large balances. Every minute a scammer spends on a dead-end call is a minute they're not targeting someone less prepared. Our 18 August 2026 story on holiday photo fraud showed the same principle from the other side: criminals invest time only where they expect a return.
What information do these scams try to steal?
Bank impersonation calls typically fish for a specific set of personal and financial data:
| Data type | Why fraudsters want it |
|---|---|
| Full name and address | To pass bank security checks |
| Account number and sort code | To initiate transfers |
| Online banking password | Direct account access |
| One-time passcode (sent by text) | To authorise payments |
| PIN | Card-present fraud |
No single piece is the whole prize. Fraudsters build a picture across the call.
What should you do if you get one of these calls?
Hang up and call your bank directly using the number on the back of your card or on its official website. Never use a number the caller provides. Banks won't call and ask for your full PIN or a one-time passcode over the phone.
If you want to waste their time as this reader did, that's your call. Vulnerable people shouldn't feel pressured to engage. The safer move is always a clean hang-up.
Report the call to Action Fraud, the UK's national fraud reporting centre. If the scammers claim to represent a specific bank, that bank's fraud team also wants to know.
Should you worry?
The mechanics here aren't new, but the volume is. What's worth watching is how AI is sharpening the personalisation of these calls, making the opening hook harder to spot as fake. That's the shift this beat is tracking.
