By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.

The Call Ended, But the Lesson Stayed With Me
After speaking with my bank’s real customer service team, I realised how carefully the scam had been planned.
The caller never shouted.
He never threatened me.
He never asked for money immediately.
Instead, he built trust.
He sounded knowledgeable.
Professional.
Patient.
That made him far more dangerous than the stereotypical scammer most people imagine.
The experience taught me that criminals don’t always rely on sophisticated hacking tools.
Sometimes, they simply rely on convincing conversations.
The Biggest Warning Signs I Almost Missed
Looking back, there were several clues that exposed the scam.
Here are the most important ones.
🚩 They Called Me Unexpectedly
I never requested assistance.
The call came out of nowhere.
Unexpected calls about urgent banking problems should always be treated with caution.
If someone claims there’s an issue with your account, don’t rely on the incoming call alone.
Verify it independently.
🚩 They Wanted Me to Stay on the Phone
The caller didn’t want me to hang up.
He wanted to keep me engaged while he guided me through the process.
That prevented me from contacting the real bank.
Whenever someone insists that you remain on the line while dealing with your finances, pause and think carefully.
🚩 They Created Urgency
Throughout the conversation, the caller repeated phrases like:
“We need to act immediately.”
“Your account is at risk.”
“Don’t delay.”
Urgency is a classic social engineering technique.
The objective is to make you react emotionally instead of thinking logically.
🚩 They Asked for Security Information
The biggest warning sign came when the caller asked me to share a verification code.
Banks put those codes in place to protect customers.
If someone unexpectedly asks you to reveal them, that’s a major warning sign.
Treat verification codes, passwords and PINs as confidential information.
🚩 They Discouraged Independent Verification
When I suggested calling the bank myself, the caller tried to stop me.
That alone told me something wasn’t right.
A genuine bank employee should never object to you contacting the bank through its official customer service channels.
How to Protect Yourself From Bank Impersonation Scams
The good news is that a few simple habits can greatly reduce your risk.
Call the Bank Yourself
If someone claims to represent your bank:
- End the call politely.
- Find the official customer service number from your bank’s website, banking app or the back of your bank card.
- Call the bank yourself.
Never rely on a phone number provided by the caller.
Never Share Security Codes
Treat One-Time Passwords (OTPs), authentication codes and verification codes like your house keys.
They’re intended for you—not for someone who unexpectedly calls you.
If you’re asked to reveal one, stop the conversation and verify independently.
Use the Official Banking App
If someone says there’s suspicious activity on your account:
- Open your banking app yourself.
- Review recent transactions.
- Check for official notifications.
Don’t click links or follow instructions provided during an unsolicited call.
Slow Down
Scammers benefit when victims panic.
Before making any financial decision:
Pause.
Take a breath.
Verify the information through an official channel.
Those few extra minutes could prevent a costly mistake.
Learn Your Bank’s Security Practices
Most banks publish guidance explaining how they communicate with customers.
Knowing what your bank normally does—and doesn’t do—can help you recognise suspicious requests more quickly.
Frequently Asked Questions
Can scammers really pretend to be bank employees?
Yes.
Criminals may use publicly available information, convincing scripts and professional language to impersonate banks or other trusted organisations.
What if the caller knows my personal information?
Knowing your name, phone number or even other personal details does not prove the caller is genuine.
Always verify independently before acting.
Should I trust caller ID?
Not completely.
Caller ID information can sometimes be misleading or manipulated.
If a call concerns your finances, it’s safest to end the conversation and contact your bank using an official number you already trust.
What should I do if I accidentally shared information?
If you believe you’ve shared sensitive banking information:
- Contact your bank immediately.
- Explain what happened.
- Follow the bank’s instructions to help secure your account.
Acting quickly may reduce the risk of further harm.
Final Thoughts
The fake bank manager didn’t need malware.
He didn’t need to break into my computer.
He only needed me to believe he was trying to help.
That is what makes impersonation scams so effective.
They exploit trust rather than technology.
Today, whenever someone unexpectedly claims to be calling from my bank, I follow one simple rule:
Hang up. Verify. Call back using the official number.
That habit takes only a few minutes.
But it could protect your savings, your personal information and your peace of mind.
When it comes to your finances, never let urgency replace verification.
About the Author
Jackson Godwin is a Cybersecurity Consultant specialising in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk and Compliance (GRC), ISO/IEC 27001, PCI DSS, Cloud Security, AI Security and Digital Risk Management.
With years of experience helping organisations identify vulnerabilities, strengthen security controls and improve cyber resilience, Jackson is passionate about making cybersecurity practical, easy to understand and accessible to everyone.
Through JacksonTechnology.com.ng, he publishes cybersecurity awareness stories, ethical hacking tutorials, compliance guides, cloud security insights, AI security resources and practical online safety tips to help individuals and businesses stay protected against evolving cyber threats.
His mission is to educate, empower and inspire safer digital habits—one cybersecurity story at a time.









