Loading story…
A sophisticated social engineering scam has been reported in which fraudsters impersonate Chase bank representatives to deceive potential victims. The scam begins with a caller claiming to be from Chase, who reassures the target by stating that the bank would never ask for personal information or passwords, thereby establishing a false sense of security. The caller then provides the victim with seemingly official details, such as two 'cancellation codes' and a lengthy case number composed of four letters and ten digits, to further legitimize the interaction. As the conversation progresses, the caller offers to transfer the victim to a supervisor, a tactic designed to mimic standard customer service procedures and enhance the appearance of authenticity. After a brief pause, a second individual, introducing himself as 'Mike Wallace,' joins the call and requests the case number, reinforcing the illusion of a structured escalation process. This 'supervisor' then explains a fabricated scenario involving a new account, Zelle transfers, and activity in Texas, suggesting that an attempted withdrawal needs to be reversed. The scam is engineered to capture the victim's full attention and trust, making them more susceptible to following the fraudsters' instructions. The narrative highlights how even individuals who are generally aware of scam tactics can be drawn in by the convincing nature of such schemes. The use of specific banking terminology and procedural language is intended to lower the victim's guard. The scam leverages the authority and familiarity of customer service hierarchies to manipulate targets. The inclusion of detailed case numbers and codes is a psychological tactic to create a sense of legitimacy and urgency. The fraudsters' approach demonstrates a high level of planning and understanding of typical banking interactions. The scam specifically references Zelle, a popular peer-to-peer payment service, as part of the fraudulent scenario. The incident serves as a warning that social engineering attacks are becoming increasingly sophisticated and can affect even those who consider themselves vigilant. The reporting of this scam underscores the importance of verifying the identity of anyone claiming to represent a financial institution, especially when unsolicited contact is made. The case also illustrates the need for ongoing education and awareness regarding the evolving tactics used by cybercriminals in the financial sector.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
U.S. officials warned that scammers are spoofing banks, Zelle, and even the FBI to pressure victims into transferring money to fraudulent 'safe' accounts. The report highlighted losses suffered by at least two customers, including a Chase customer who lost nearly $40,000 and a Huntington Bank customer who sent $5,000 via Zelle.
Online Threat Alerts warned about scam calls spoofing Wells Fargo’s official number, with fraudsters claiming suspicious account activity to pressure victims into transferring funds, sending money via Zelle or wire, or revealing one-time codes. The report also noted possible attempts to capture victims’ voices for abuse against voice-authentication systems and advised customers to verify through trusted bank contact channels.
Two references published on September 30, 2025 point to coverage titled "Details of a Scam," indicating public reporting about a scam. No underlying incident details, victim information, or dated real-world developments are provided in the supplied content.
The Register reported on a banking scam in which criminals used social engineering and knowledge about victims to convince them to move money themselves, framing the transfer as protective action. The coverage documented an early form of the bank-spoofing fraud pattern later highlighted in 2025 and 2026 warnings.
5 references tracked. Mallory keeps watching after this page renders.
foxbusiness.com
Open sourceonlinethreatalerts.com
Open sourceschneier.com
Open sourcesecurityboulevard.com
Open sourcetheregister.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Fraudsters are impersonating **Huntington Bank** through phone calls, text messages, and emails in campaigns designed to steal online banking credentials, Social Security numbers, and one-time passcodes, while also pressuring customers to move money themselves. Reported lures include fake alerts about locked accounts, bogus requests to "upgrade" Zelle access, and caller ID spoofing that makes calls appear to come from Huntington’s legitimate customer service number. Victims are being urged to verify any account issue only through Huntington’s official mobile app, website, or the phone number printed on their bank card rather than using contact details supplied in unsolicited messages. People who may have interacted with the scam are advised to contact the bank immediately, change passwords, monitor accounts for unauthorized activity, and report identity theft or fraud through official channels such as **IdentityTheft.gov**.
Jul 23, 2026
Credit unions and financial institutions are facing a surge in sophisticated fraud schemes that leverage social engineering and AI-driven tactics to compromise payment security. Attackers are increasingly using phishing, vishing, and smishing to harvest credentials and one-time passcodes, enabling account takeover and card-not-present fraud. Imposter scams, such as fraudulent calls and urgent messages, pressure victims into making instant, irreversible transfers through crypto ATMs or quick-pay apps. Security leaders emphasize the importance of real-time monitoring, member education, and advanced authentication methods—including tokenization and biometrics—to counter these evolving threats and protect members without degrading user experience. Criminal organizations, including groups operating out of China, have orchestrated large-scale scams by sending deceptive texts about overdue tolls or postal fees to trick individuals into divulging credit card details. Stolen card numbers are then installed in digital wallets like Google and Apple Wallets in Asia and shared with U.S.-based accomplices to make fraudulent purchases. These operations have resulted in over $1 billion in losses over three years, highlighting the global scale and technical ingenuity of modern payment fraud. Early reporting by victims and rapid response by financial institutions are critical to stopping fraudulent transfers and involving law enforcement to mitigate losses.
Jul 12, 2026
A dramatic increase in banking and financial scams has been observed globally, with a 65% rise in scam activity over the past year, according to data from BioCatch. Financial institutions serving nearly 350 million consumers across five continents have reported explosive growth in various scam types, including a tenfold increase in SMS-based phishing (smishing) attacks. Voice phishing (vishing) attempts have doubled, romance scams have risen by 63%, and investment scams have climbed by 42%. Purchase scams remain the most common form of fraud, with a 14% increase in attempts. The Global Anti-Scam Alliance estimates that consumers now lose over $1 trillion annually to scams, a figure that continues to escalate. Much of this surge is attributed to organized criminal operations exploiting the financial system, as noted by the U.S. Department of the Treasury. Scammers are leveraging current events and government programs, such as New York State’s inflation refund initiative, to launch targeted phishing campaigns. These campaigns often impersonate official agencies, urging recipients to provide sensitive payment information under the threat of losing their refunds. The phishing messages typically originate from foreign numbers and direct victims to fake websites designed to harvest personal data, including Social Security Numbers and bank account details. In the private sector, attackers are targeting users of popular financial platforms like Robinhood, sending convincing text messages that warn of suspicious account activity and prompt users to log in via fraudulent links. These fake login pages are crafted to closely mimic legitimate sites, and after stealing credentials, some even redirect victims to the real site to avoid suspicion. Additionally, credential phishing campaigns are evolving rapidly, with scammers impersonating Google Careers to target Google Workspace and Microsoft 365 users. These emails, sent in multiple languages and using frequently changing sender details, lure recipients into multi-step traps involving fake verification pages and credential harvesting sites. Attackers abuse legitimate services such as Salesforce and Recruitee to distribute these phishing emails, and the malicious domains are often newly registered to evade detection. The sophistication and adaptability of these scams make them increasingly difficult for both individuals and organizations to detect and prevent. Financial institutions and cybersecurity experts emphasize the need for heightened vigilance, robust anti-phishing training, and advanced fraud detection technologies to combat this growing threat. The widespread nature of these scams underscores the importance of cross-sector collaboration and public awareness to mitigate financial losses and protect sensitive information. As scammers continue to refine their tactics, the risk to consumers and businesses remains high, necessitating ongoing adaptation of security measures. The convergence of social engineering, technical deception, and exploitation of current events highlights the evolving landscape of financial cybercrime. Authorities and industry leaders are calling for increased investment in behavioral biometrics and real-time fraud monitoring to stay ahead of these sophisticated threats. The ongoing battle against banking and financial phishing scams is expected to intensify as attackers leverage new technologies and social trends to expand their reach.
Jun 29, 2026