Beware of This Fake Bank Card Scam Looking to Steal Your Money

A new form of bank card scam is targeting victims to steal their financial information and ultimately their money.

The scam begins when a bank card arrives at someone’s home even though they never requested a new or replacement card.

The unexpected delivery can confuse. Recipients may wonder whether the bank made an administrative mistake, someone opened an account in their name, or their existing card has been compromised.

Scammers use this uncertainty to make their next contact appear legitimate. They may call or message the recipient and claim there is a problem with the card or that it must first be activated before it can be cancelled.

They may ask the victim to confirm personal information, provide card details, enter banking credentials through a link, or read out a verification code sent to their phone.

Receiving a physical card does not make these requests legitimate. The card itself may simply be the first step in convincing the victim that the follow-up communication is genuine.

What to Do if it Happens to You

Do not use or activate an unexpected card, and do not follow any instructions that arrive with it until you have verified the situation directly with your bank.

Open your official banking app and check for new accounts, cards, or unfamiliar activity. Contact your bank using the phone number printed on your existing card, listed on its official website, or provided through its official app. Do not call a phone number, scan a QR code, open a link, or use an email address included in an unexpected package or message.

Ask your bank whether the card is genuine and whether anyone has attempted to open an account or make changes using your identity. Keep the card and any related messages in case your bank or police later asks for them.

If someone calls, texts, or emails you about the card, do not provide your PIN, banking passwords, account information, or verification codes. A legitimate bank will not require you to reveal these details to an unexpected caller. Fraudsters may also use several methods of contact. They could initially send a text message and later follow up with a phone call.

The caller may already know your name, address, or bank and use that information to gain your trust and create a sense of urgency.

However, knowing personal information does not prove that the caller works for your bank. Such information may come from data breaches, public records, social media, or previous scams.

End any unexpected conversation involving your bank account and contact your bank independently through a verified channel.

Never transfer money to a so-called “safe account,” withdraw cash, hand over your existing bank card, or give another person access to your online banking because they claim there is a security problem or investigation.

Similar Scams Can Reach Your Front Door

The warning follows a similar doorstep bank-card scam in which criminals used text messages and spoofed phone calls before sending someone to collect a victim’s supposedly compromised bank card.

The methods may differ, but the same precaution applies: a bank will not unexpectedly send someone to your home to collect your card, PIN, cash or banking information.

If someone arrives at your home claiming to represent your bank, do not give them anything or allow them inside.

Close the door and contact your bank independently. If the person refuses to leave or makes you feel unsafe, contact local law enforcement.

What to Do if You Already Shared Information

Act immediately if you used the unexpected card, entered information on a linked website, or shared your banking credentials, PIN, or verification code. Contact your bank and ask it to block any affected cards and check your account for unauthorized activity. Change compromised online banking credentials from a trusted device, particularly if you use the same password on other accounts.

Check your account for unfamiliar transfers, beneficiaries, contact information, or other changes. Save screenshots, messages, phone numbers, and email addresses connected to the scam, and report the incident to your bank and local police.

You should also inform family members, particularly older relatives, so they know to be careful with unexpected bank cards, follow-up calls, and people arriving at their homes. Bitdefender Scamio can be used to check suspicious messages, emails, and screenshots, while Bitdefender Link Checker can help inspect questionable URLs before they are opened.

An unexpected bank card is not necessarily a reason to panic. However, it is a reason to avoid engaging with anyone who contacts you about it and verify the situation directly with your bank.