Scam alert: Impersonation calls, fake websites and “safe accounts”

Protecting yourself against impersonation calls, fake websites and "safe accounts" scams

These scams are designed to create a sense of panic and urgency, making people feel they should act immediately. Their goal is to persuade you to share security information, authorise payments or give them access to your device.

Recognising the warning signs can help you avoid these scams and protect yourself.

How these scams typically unfold

Fraudsters may contact you by phone, text, email, WhatsApp or social media while pretending to represent a trusted organisation.

 

They often claim that:

• Suspicious activity has been detected on your account

• A payment needs to be stopped urgently

• Your account has been compromised

• Your money needs to be moved to a “secure” or “safe” account

 

To make their approach seem genuine, they may:

• Spoof telephone numbers so the call appears to come from a legitimate organisation

• Reference personal information obtained from previous data breaches or other scams

• Direct you to websites designed to look like genuine banking platforms

• Encourage you to install remote-access software such as AnyDesk or TeamViewer

• Ask for one-time passcodes (OTPs), Transaction PINs (TPINs) or other security information

• Pressure you into acting quickly without giving you time to think

Bank impersonation calls

A common scam we have seen involves a fraudster pretending to be from a bank’s fraud department.

The caller may advise that suspicious transactions have been detected on your account and offer to help secure your funds. In some cases, they may already know a small amount of personal information about you, making the call appear more credible.

They may trigger a genuine one-time passcode (OTP) and then claim it is needed to:

• Verify your identity

• Stop a fraudulent transaction

• Reverse a payment

• Secure your account

In reality, the OTP is being used to authorise activity on your account. Sharing it with a fraudster could allow them to complete fraudulent transactions

Fake websites and remote-access scams

Fraudsters are increasingly using convincing copycat websites designed to look like genuine banking platforms.

You may be asked to:

• Visit a website that looks like a genuine banking site

• Download remote-access software such as AnyDesk or TeamViewer

• Share your screen via WhatsApp or another video-calling application

Once access is granted, fraudsters may be able to view sensitive information and guide you through actions that compromise your accounts.

These scams can appear particularly convincing because they can see genuine account information and activity.

The "safe account" scam

Another common tactic used by fraudsters is to claim that your money is at risk and must be transferred to a “safe” or “secure” account.

The fraudster may claim this account belongs to:

• Your bank

• Another secure banking facility

• The police

• The Financial Conduct Authority (FCA)

• A government department

In reality, the account is controlled by the fraudster or their associate.

No legitimate bank, regulator or law-enforcement agency will ever ask you to move money to a “safe account”. With this information, fraudsters can gain full control of your account, including setting up new payees and moving funds without your knowledge

How to protect yourself

Please remember:

• Weatherbys may contact you about fraud through someone you already know at the bank, such as your private banker or usual point of contact

• The Weatherbys Fraud Team will never contact you directly by telephone

• Weatherbys will never ask you to:

• Share your TPIN or OTP
• Download remote access software
• Share your screen
• Click links sent during an unsolicited call

• Caller ID can be falsified — do not rely on it as proof of identity

• If a call feels unexpected, pressured or unusual, hang up immediately

If you receive a suspicious call:

• Hang up straight away

• Do not follow any instructions

• Contact Weatherbys directly using a trusted phone number from our official website or the back of your debit card

 

If you are ever unsure of the legitimacy of any: link, website, company, advert, email or text you come across, please feel free to ask us to take a look by sending it to fraud@weatherbys.bank or by asking your usual banking team to forward it to us.

If you think you have been a victim of this type of scam, please speak to your usual banking team in the first instance. You can also contact the Private Bank on +44(0)1933543600, the Business Bank on +44(0)1933543860 or the Racing Bank on +44(0)1933543543.