If your bank calls you, they already know your account number. If your insurance company calls, they already have your policy details on file. So why would they ask you to verify that information over the phone? The short answer: they wouldn’t. If a caller is asking you for details they should already have, you’re almost certainly dealing with a scammer.
How the phone impersonation scam works
This scam relies on one simple trick: trust. The caller imposter pretends to be from your bank, credit card company, utility provider, or another institution you have an account with. They sound professional, they may even spoof their caller ID to display the company’s real phone number, and they create a sense of urgency to get you talking before you have time to think.
Then comes the ask. They’ll request personal information like:
- Your full account number
- Your Social Security number or the last four digits
- Your PIN, password, or security questions
- Your date of birth or billing address
Here’s the red flag: a legitimate institution that’s calling you already has this information in their system. They don’t need you to recite it back. If someone is asking for details they should already know, it’s a scam—hang up immediately and block the number.
Phone scams are surging at an alarming rate
Impersonation scams have become one of the most costly forms of fraud in the country. According to the FBI’s 2025 Internet Crime Report, government and business impersonation scam complaints nearly doubled between 2024 and 2025, resulting in approximately $797 million in reported losses from government impersonation alone. And those numbers only reflect what victims actually reported—the true cost is likely far higher. [
How to protect yourself from phone impersonation scams
Follow these rules every time you receive an unexpected call:
- Never share personal information with an inbound caller. If someone calls you and asks for account numbers, passwords, or other sensitive details, treat it as a red flag—no exceptions.
- Hang up and call back directly. If you think the call might be legitimate, hang up and dial the official number on the back of your card, on your statement, or on the company’s website.
- Don’t trust caller ID. Scammers use spoofing technology to make it look like the call is coming from your bank, the IRS, or any number they choose. Caller ID is not proof of identity.
- Watch for urgency and pressure. Phrases like “your account has been compromised” or “we need to verify your identity immediately” are designed to make you panic and act without thinking.
- Register with the Do Not Call Registry. While it won’t stop scammers entirely, it reduces legitimate telemarketing calls—making it easier to spot the fraudulent ones. Report violations at https://www.donotcall.gov.
What to do if you’ve already given information to a scammer
If you realize you’ve shared sensitive details with a suspicious caller, act fast:
- Contact your bank or financial institution immediately and alert them to potential fraud on your account.
- Change your passwords and PINs for any accounts that may have been compromised.
- Place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion.
- Report the scam to the FTC at https://ReportFraud.ftc.gov and the FBI’s IC3 at https://www.ic3.gov.
Legitimate companies calling you will never ask you to provide information they should already have on file. That one rule alone can protect you from the vast majority of phone impersonation scams. If something feels off, trust your gut—hang up, look up the real number, and call them back yourself.
