AI is giving bank scammers tools so convincing that even careful Americans are losing thousands. The American Bankers Association says the red flags are hiding in plain sight.
The call looks real. The number matches. The voice sounds professional. And then your money is gone. Teresa Maddox lost thousands after a caller claimed to be from her bank's fraud department — and Kenny Sumner watched $15,000 vanish from his checking account within 30 minutes of hanging up.
Bank scams have always been dangerous. But artificial intelligence has made them nearly impossible to detect on instinct alone. Here's how to know the difference — before it costs you.
- $15,000 — Drained in one scam call
- 5 — Fake charges used as bait
Could a Bank Scammer Fool You?
Five scenarios. Two minutes. Find out how scam-ready you really are.
You get a call from a number that matches your bank's fraud line. The caller says suspicious charges just hit your account and you need to act NOW. What do you do?
- Answer their questions — the number checks out — Scammers can spoof caller ID to show your bank's exact phone number, as happened to Kenny Sumner, whose $15,000 disappeared even though the number appeared to match his bank's fraud department. A matching number is not proof of identity.
- Hang up and call the number on the back of your card — This is the right move. Hanging up and dialing the official number yourself breaks the scammer's connection and puts you in control. Your real bank will have the same conversation — no legitimate call requires you to stay on the line.
- Ask the caller to verify themselves with your account number — Asking the caller to 'verify' you can actually hand over account details to a fraudster. Scammers use this moment to extract information, not prove their own identity. Hang up instead.
- Google the bank's number while staying on the line — Closer — but staying on the line keeps you under the scammer's pressure. The safest move is always to hang up completely, then call the number printed on your debit or credit card.
A caller from your 'bank's fraud team' says the safest way to protect your money is to transfer it to a new, 'secure' account they'll set up for you. What's your read?
- It sounds reasonable — the bank knows best — This is one of the clearest red flags the American Bankers Association identifies: a real bank will never instruct you to move your money to protect it. If a caller says to transfer funds, you are talking to a scammer — full stop.
- Red flag — no real bank asks you to move money — Exactly right. The Banks Never Ask That campaign specifically highlights this tactic. Teresa Maddox was told to move her money to 'protect it' — and instead, thousands of dollars disappeared.
- Ask for a supervisor before deciding — A scammer will happily put a 'supervisor' on the line — it's the same criminal with a different voice. The request to move money is itself the red flag. No supervisor can make that request legitimate.
- Agree, but only if they can repeat your account info back — Scammers often have partial account details already. Hearing your last four digits back is not verification — it's a social engineering tool. The only safe response to a 'move your money' request is to end the call.
The caller says this transaction must stay confidential — 'don't mention it to anyone, including other bank staff, or you could compromise the investigation.' How do you respond?
- Keep it secret — they said it could hurt the investigation — Secrecy is a manipulation tactic, not a legitimate security protocol. The American Bankers Association explicitly lists 'telling you to keep a transaction secret' as something a real bank will never do. Legitimate fraud teams welcome transparency.
- This is a red flag — real banks don't ask for secrecy — Correct. Scammers demand secrecy to stop you from getting a second opinion that would expose them. Any caller who tells you not to speak to other bank staff is not working for your bank.
- Agree, but tell your spouse or a family member anyway — Telling a trusted person is smart instinct — a second opinion often breaks the scammer's spell. But the request for secrecy itself should end the call. You shouldn't need to sneak around a request from your own bank.
You receive an email from your bank. The grammar is perfect, the logo looks right, and the link appears to go to your bank's website. What's the most important thing to check?
- Nothing — perfect grammar and a real logo mean it's legit — AI has erased this safety net. Paul Benda of the American Bankers Association warns that scammers now 'send out perfect emails' and 'can craft websites that look exactly like your bank website.' Polished presentation is no longer a sign of legitimacy.
- The actual URL you land on — not just where the link claims to go — Right. The display text of a link can say anything — the real destination is what matters. Type your bank's address directly into a fresh browser tab rather than clicking through an email to be certain.
- Whether the email came from a recognizable name — Sender names can be spoofed just like caller ID. The American Bankers Association notes scammers craft communications that look indistinguishable from the real thing. The only safe move is to navigate to your bank directly, not via any link in the message.
- Whether it asks for your full password — banks only ask for partial info — That's one useful signal, but AI-powered scam emails are sophisticated enough to mimic even partial-info prompts. The safest rule: never follow a financial link from an email. Always open a new tab and go directly to your bank.
You realize 30 minutes after a call that you may have given a scammer your account details — just like Kenny Sumner did. What's the single most important first step?
- Change your online banking password immediately — Changing your password is a good step, but it's not enough on its own. Scammers can be moving money right now — your bank needs to know immediately so they can freeze accounts and stop further losses.
- Call your bank using the number on your card — right now — This is exactly what Paul Benda of the American Bankers Association recommends: 'Your bank can lock down those accounts, make sure you don't lose any more money.' Kenny Sumner lost $15,000 in the time between the call and when he checked his account. Speed is everything.
- File a police report first to have documentation — Documentation matters — but not before calling your bank. Every minute a scammer has access is a minute more money can leave your account. Call your bank first, then file a report.
- Monitor your account for a few days before escalating — Waiting is the most costly option. Kenny Sumner checked his account just 30 minutes after the scam call and the $15,000 was already gone. Contact your bank the moment you suspect something went wrong — not after you've confirmed it.
Teresa Maddox didn't pick up because she was careless. She picked up because the caller ID read her bank's name, the voice was professional, and the script was airtight: five suspicious charges in New York, a request to verify, an offer to 'protect' her money. By the time she realized what happened, the funds were gone.
What made her vulnerable isn't a character flaw — it's a technology gap. Scammers now have access to AI tools that can clone voices, generate flawless emails, and build copycat bank websites that fool even careful eyes.
They're even going so far as using it to deep fake voices, to make clones of voicesPaul Benda, Executive Vice President for Risk, Fraud, and Cybersecurity with the American Bankers Association
Bank Scam Myths vs. Reality
If the caller ID shows my bank's name, the call is from my bank.
Verdict: false
Caller ID can be spoofed. Kenny Sumner confirmed the number on his phone matched his bank's fraud department — and still lost $15,000. A matching number is not verification of identity.
Scam emails are easy to catch because they have bad grammar and spelling errors.
Verdict: false
Paul Benda of the American Bankers Association says AI has eliminated that tell: scammers now 'send out perfect emails' and can clone websites that look identical to your real bank's site.
A real bank will sometimes ask you to move money to a 'safe' account.
Verdict: false
This is one of the clearest red flags the Banks Never Ask That campaign identifies. No legitimate bank instructs customers to transfer money to protect it — that instruction is itself the scam.
If you've already shared info with a scammer, it's too late to limit the damage.
Verdict: false
Benda is direct: call your bank immediately. 'Your bank can lock down those accounts, make sure you don't lose any more money.' Acting fast after a suspected breach can stop further losses.
The American Bankers Association's Banks Never Ask That campaign exists precisely because these scams have become so effective that the traditional advice — 'just use common sense' — no longer applies. Common sense tells you to trust a call from a number you recognize. Common sense says a professional, grammatically perfect email from your bank is real. AI has turned common sense into a liability.
Paul Benda, who leads risk and fraud strategy for the association, puts it plainly: scammers can now craft voices, emails, and entire websites that are indistinguishable from the real thing. The only reliable defense is knowing, in advance, what a real bank will never do.
What To Do Right Now
- Memorize the three 'never' rules — Your bank will never pressure you to act immediately. Your bank will never tell you to move money to protect it. Your bank will never ask you to keep a transaction secret. If any of these happen, hang up.
- Hang up and call back on the official number — Never trust an incoming call's legitimacy, even if the number looks right. End the call, then dial the number printed on the back of your debit or credit card. That's the only verified line.
- Test yourself with the Scam Slayer quiz — The American Bankers Association offers a free quiz at BanksNeverAskThat.com to help you practice spotting red flags before a real scammer calls.
- If you've already clicked or shared — call your bank immediately — Don't wait to confirm whether money is missing. Contact your bank the moment you suspect something went wrong. Speed is the difference between stopping a scammer and losing everything in the account.
For Teresa Maddox, the hardest part isn't the money — it's what the experience did to her confidence. Someone who knew exactly what they were doing walked her, step by step, through handing over her own savings. The calls sounded legitimate. The concern felt real. The urgency was engineered.
That's the design of these scams: they're built to make the victim feel responsible. Maddox's experience, and Sumner's $15,000 loss, are reminders that these are sophisticated criminal operations — not simple tricks. Slowing down before moving money or sharing information is the only reliable counter.
Somebody that knows what they are doing; they can really make you feel stupidTeresa Maddox, Bank scam victim
Protect Yourself — Free Resources
- Take the Scam Slayer Quiz: The American Bankers Association's free quiz tests whether you can spot bank scam tactics before a real fraudster calls.
- Call Your Bank Immediately if Targeted: Use the number on the back of your card — not a number provided by a caller. Your bank can freeze accounts and stop further losses the moment you report.
- Three Things Your Bank Will NEVER Ask: Act immediately. Move your money to a 'safe' account. Keep the transaction secret. Any of these in a call = hang up now.
How AI Is Changing the Scam Landscape
The evolution of bank scams is inseparable from the evolution of artificial intelligence. Voice cloning tools can now replicate a person's speech patterns from seconds of audio. Large language models generate emails and scripts that have none of the grammatical tells that once helped people identify fraud. Website-cloning technology allows scammers to mirror a bank's entire online interface.
Paul Benda of the American Bankers Association notes that scammers are deploying all of these tools simultaneously — deep-faked voices, perfect emails, replica websites — to build a layered illusion of legitimacy. The result is that the traditional mental checklist consumers used to evaluate suspicious communications is no longer reliable on its own. Behavioral rules — never act immediately, never move money on someone else's instruction, never keep a banking transaction secret — are now the primary defense, because visual and auditory verification can no longer be trusted.
