A phone scam has drained more than $1 billion from Americans, most of them over 60

A caller ID lights up with the exact name and number of a person’s own bank, and a calm voice on the line already knows the account balance, the last few digits of the card, and recent transactions. That combination of familiarity and inside knowledge is the engine of a fraud that officials say has siphoned more than a billion dollars from account holders across the country. The victims skew heavily toward older Americans, the group with the most savings to lose and the greatest inclination to trust a call that appears to come from a trusted institution.

How the spoofing scheme works

The scam begins with a technique called caller ID spoofing, which lets fraudsters make a phone display any number they choose, including the real customer-service line printed on the back of a bank card. Federal officials warn that criminals are using this trick to pose as a victim’s own bank and drain their accounts, opening the conversation with details that only an insider should seem to know. Those specifics are often harvested from earlier data breaches, phishing texts, or information bought on illicit markets. Armed with a genuine-looking number and a few accurate facts, the caller manufactures an air of legitimacy in seconds, which is precisely the moment the manipulation begins.

The pivot to a fake emergency

Once trust is established, the script turns urgent. The caller claims that suspicious activity or fraud has been detected on the account, framing themselves as an ally racing to protect the victim’s money. To stop the supposed thief, they say, the funds must be moved immediately to a new secure account, or a verification code sent by text must be read back, or login credentials must be confirmed. Every one of those requests is the actual theft in disguise. Transferring money to the so-called safe account sends it straight to the criminal, and handing over a one-time passcode gives the scammer the final key needed to authorize a transfer or reset a password. The pressure to act fast is deliberate, engineered to short-circuit the pause during which a target might otherwise call the bank back on a verified number.

Why older adults are the target

The disproportionate toll on people over 60 is not an accident of demographics but a product of design. Older adults are more likely to hold substantial retirement savings, home equity, and other accumulated wealth, making a single successful theft far more lucrative than draining a younger person’s thinner accounts. The FBI notes that criminals deliberately seek out older victims for reasons that go beyond money, citing a generational tendency to be trusting and polite on the phone, and in some cases isolation that makes an unexpected call feel welcome rather than suspicious. Shame compounds the damage. Many older victims never report what happened, fearing judgment or worrying that relatives will question their independence, which means the true scale of the losses is almost certainly larger than the reported figures.

The staggering scale of the losses

The reported numbers are already enormous. Federal complaint data has shown losses to Americans over 60 climbing sharply year over year, reaching billions of dollars annually as fraudsters refine their tactics and expand their reach. Banking spoof calls are one thread within that larger tapestry of elder fraud, and consumer-protection groups tracking the trend describe how spoofed bank numbers are tricking customers into surrendering money and information. Because so many incidents go unreported, and because a single victim can be hit for tens of thousands of dollars, the aggregate toll of the phone-based schemes has pushed past the billion-dollar mark, a figure that captures only the cases authorities actually learn about.

The one habit that stops it

The defense that security experts return to again and again is disarmingly simple: hang up and call back. No legitimate bank will ever demand that a customer move money to a new account to keep it safe, and none will need a customer to read back a verification code that was just texted to them, because those codes exist to keep the bank out, not to let it in. The safest response to any alarming call about an account is to end it, ignore any number the caller provides, and dial the official line printed on the card or the bank’s website. That single pause defeats the entire scheme, because it strips away the spoofed number and the manufactured urgency that make the fraud work. Officials also urge families to talk openly about these tactics with older relatives before a call comes, so that a warning already lives in mind when the phone rings. The scam depends on catching people alone, rushed, and unprepared, and a plan made in advance is what turns a potential victim into someone who simply hangs up.

This article was produced with the assistance of AI and reviewed by the Morning Overview editorial team.

More from Morning Overview