I encountered a pretty good one this past Friday. I got a fraud text from one of my banks, a large prominent one, that someone had tried buying an I-phone on my card. I've gotten these before when legit fraud charges were occurring so I was accustomed to the process. I replied "NO" that I didn't authorize the charge and the auto text said an agent would be in contact. This is the same process I've gone through in the past for legit unauthorized charges.
5 minutes later an agent calls me. Totally professional, saying all the right things, "Rest assured we'll get this taken care of" and all that. The fella didn't ask me for personal information like SSN or anything. He did the "can you verify" thing a few times, which isn't uncommon. "Can you verify the bank accounts you have linked to your account?" He didn't ask for account numbers, just the names of the banks. In the moment it was still seeming above board. He proceeds to tell me that the perpetrator has authorized a wire from one of my linked bank accounts, with a very specific amount, something like $5,019.32. The other bank in question is also with a large known bank. He said he's going to put me on hold while he contacts that bank, and will get me on the phone with their fraud department. 30 seconds later I get a call from that bank. Even had their logo on my phone screen.
The second fella from the second bank was also super professional. He said that a wire was sent from one of my accounts with them. While I was on the phone with both of these guys, I was secretly logging into each of my bank accounts to look for any unauthorized transactions. A pending transaction always shows up pretty much instantly if it's legit fraud. All of my accounts looked normal. Anyway, this fella said that the pre-authorization for the wire takes 72 hours or some crap, and since it was end of day Friday, we needed to process a wire reversal to ensure it wouldn't go through by Monday, and the money would be gone. Throughout both 10 minute conversations they were very calm and professional. Got put on hold a few times, used all the right lingo, etc. The guy walked me through the process of doing a wire reversal. As I'm clicking through the process it's becoming clear they are trying to get me to send a legit wire, not some wire-reversal as he claimed. He was prepared to give me the proper information for me to enter to get the reversal processed.
At this point it was getting too fishy. I asked him to explain exactly what it was we were trying to do because I wasn't grasping it. He did. He explained several times, calmy, that my bank doesn't ask for personal information, which he didn't, and that I was indeed talking to the correct person. While I had him on the phone I googled the fraud number for the bank and it wasn't the same. I also googled the number he called from and nothing came up showing it was associated with the bank. At this point I hung up. I called the actual fraud departments with both banks in question. Both said there was no weird charges on my account, no wires pending, no nothing. They were surprised by the level of effort that went into this scam.
After letting the whole thing sink in, I started to realize how much the guy was phishing for information in a really subtle way. In hindsight he didn't actually know if I even had a account with the first bank. It was a guess. By asking me to verify my linked accounts, he was able to come up with a narrative that made sense, spoof the other banks phone number and logo, and move the scam along. Another thing that was fishy in hindsight was that BOTH phone calls kept cutting out. I don't know if that was on purpose or not, but I had to ask him to repeat himself several times. Once I'd hung up and was able to see where the calls originated from, they were both out of Amarillo. Neither bank is based in Amarillo.
Wild stuff.