"Good afternoon, this is the fraud department. We have flagged unusual activity on your account, and we believe someone inside the bank may be involved. We need your help to catch them. Please do not discuss this with branch staff." The number on your screen looks like your bank's. The voice is calm, polite and in no hurry. That is the whole trick.
The Canadian Anti-Fraud Centre (CAFC) lists "fraud investigator" among its top 10 frauds of 2025. Our thesis is simple: this call does not work because people are gullible. It works because it is built to make a careful person feel that being careful is the problem. Hanging up feels rude, and going to the branch feels like tipping off the criminal. Once you see that design, the call loses most of its power.
What the numbers say
According to the CAFC's "Top 10 frauds in 2025" page, fraud investigator calls produced 2,167 reports and 1,137 victims, with $28.3 million in reported losses. It ranks in the top 10 both by number of reports and by reported dollar loss. Our own arithmetic, not a CAFC figure: $28.3 million spread over 1,137 victims is roughly $25,000 each, though the page does not say how the losses were distributed. The page also does not explain how the scam works or why reports outnumber victims, so we won't guess.
The script, step by step
Interac's fraud prevention page describes the pattern: callers claim to be representatives of a financial institution, say they are helping police catch a bank employee, and may ask the person to withdraw large amounts of cash or to meet in a parking lot to hand over the money. Below is how such a call can be laid out, in our own fictional paraphrase, with the reason each step exists.
| Step | What the caller says or does | What it is for |
|---|---|---|
| 1. The display | The call appears to come from a bank-like name or number, say (416) 555-0143 | Borrowed credibility. Caller ID is only a claim, as we explain in Caller ID Is a Claim, Not a Proof |
| 2. The alarm | "We have flagged suspicious activity on your account" | Fear, so you stop asking who is calling |
| 3. The ally | "We need your help to catch an insider" | Flattery. You are now a helper, not a target |
| 4. The gag | "Don't tell the branch, a teller may be involved" | Cuts you off from the people who could say "that's not how we work" |
| 5. The task | Withdraw cash, send a transfer or move money to a "safe" place | The actual goal, presented as part of the investigation |
| 6. The handoff | Cash is handed over at a meeting place | The money leaves your control for good |
Notice that nothing in steps 1 to 4 costs you anything. The call can run for twenty minutes before it asks for a dollar, and by then you have invested in the story.
Why it works on careful people
Most fraud advice is written for people who might ignore a warning. This call targets people who take warnings seriously. You were told to guard your account, and here is someone offering to help you do exactly that. The caller may also know your name and a few details, which feels like proof. It is not proof. The CAFC's advice applies directly: do not trust the information on your call display, because it can easily be manipulated, and do not provide personal or financial information on demand.
There is also a trade-off worth admitting. Calling the bank back takes effort, and the caller makes that effort feel unreasonable by stressing urgency. In practice the five minutes you spend are the cheapest part of the whole episode. A genuine problem will still be there when you dial, and a staged one will be gone.
What a real bank does differently
This is where most articles list "things your bank will never do." We won't, because we have no primary source from any bank that we can quote, and the Interac page does not publish such a list either. Quoting a rule we cannot source would be inventing one.
Our take: you don't need a rulebook of what banks do. You need one fact about who started the conversation. The official guidance points the same way. Interac's advice is "hang up and hang on to your private banking info," and it names requests for large cash withdrawals and parking-lot meetings as warning signs. The CAFC adds that you should never accept money and send it to a third party, and that you should take five minutes to ask questions and listen to your instincts.
A real call from your bank can survive being ended. If the person is genuine, hanging up and calling the number on the back of your card costs you five minutes. If they are not, hanging up costs them the whole operation. That asymmetry is the best defence, and it works whatever the script says and whatever number appears on the screen.
What to do during the call
- Say nothing you would not say to a stranger. Don't confirm your card number, passwords or codes sent to your phone.
- Hang up. You owe the caller no explanation.
- Call your bank yourself using the number printed on the back of your card, not a number the caller gave you or the one on your screen.
- Do not withdraw cash or move money because a caller asked, whatever the reason given.
- Tell someone. The CAFC suggests asking someone you trust if something seems wrong. A second voice breaks the "don't tell anyone" spell.
If you already did something
- Call your bank at once on the number on your card and say exactly what you shared or sent.
- Report to your local police and to the Canadian Anti-Fraud Centre, through the Report Cybercrime and Fraud website or by phone at 1-888-495-8501.
- Expect a second approach. The CAFC says past fraud victims are likely to be targeted again, so treat any "recovery" offer with suspicion.
- Our entry on getting money back after a scam covers the first hours in more detail.
Questions people ask
Can a call that shows my bank's real number be fake?
Yes. The CAFC says call display information can easily be manipulated, so a familiar number tells you nothing. This is why you end the call and dial out yourself.
What if the caller already knows my name?
A name is not a credential. Basic details can be gathered from many places, and a caller who sounds well informed is still only a voice. Verify by calling back on the number on your card.
What if there really is a problem with my account?
Then calling the number on the back of your card reaches people who can see it. The same step handles a real alert and defeats a fake one, which is why we put it above any list of warning signs.
Why does the caller ask me to keep it secret?
Because secrecy keeps anyone from questioning the story. Interac's "stop, scrutinize, speak up" approach points the opposite way: speaking up is the defence, and the call depends on your silence.
The bottom line
The bank investigator call wins by making caution feel like obstruction. You beat it by changing who starts the conversation: end the call and dial the number on the back of your card yourself. Do that and the script, the display name and the polite voice no longer matter.