Greg's Corner

When Your Bank Won’t Help: Scam Victims Deserve Better

By Greg Collier

For years, we’ve warned that the biggest threat in many scams isn’t just the criminal on the other end of the phone. It’s the false sense of security victims have when they believe their bank or credit union will protect them if something goes wrong.

Unfortunately, another news story suggests that confidence may be misplaced.

According to a recent report by KENS 5 News, hundreds of customers at a Texas credit union have reportedly been targeted by sophisticated impersonation scams. Victims say they lost thousands, and when they turned to their financial institution for help, many were told the transactions were considered authorized and therefore not eligible for reimbursement.

Sadly, that response is becoming all too familiar.

The Scam Looked Convincing

The scam reportedly began with phone calls that appeared to come from the credit union’s legitimate phone number. Caller ID spoofing has become one of the scammer’s favorite weapons because it immediately lowers a victim’s guard.

The callers claimed they were from the institution’s fraud department and warned customers about unauthorized activity on their accounts.

What made the scam especially convincing was that the callers already knew sensitive information about their victims. Some reportedly knew usernames, passwords, dates of birth, or portions of Social Security numbers. That kind of information naturally leads people to believe they’re speaking with someone who legitimately has access to their account.

The scammers then sent text messages that appeared to come from the same short code the credit union normally uses for legitimate fraud alerts.

To the average customer, everything looked authentic.

Victims believed they were approving transactions that would protect their money or return funds to their account. Instead, they were authorizing transfers directly into the hands of criminals.

The Cruel Twist

Perhaps the most frustrating part of this case is what happened after the fraud.

Several victims reportedly contacted the credit union immediately, only to discover there was no 24-hour fraud department available after business hours. By the time they could speak with someone the following day, the money was already gone.

The institution then reportedly denied reimbursement, stating the transfers were authorized because customers had approved them using their account credentials.

That explanation has sparked criticism from a consumer protection attorney interviewed by KENS 5, who argued that the Electronic Fund Transfer Act (EFTA) may protect consumers even when scammers trick them into providing account access or approving fraudulent transfers. According to the attorney, if the criminal initiates the transaction through deception, those transfers may still qualify as unauthorized under federal law.

Whether courts ultimately agree remains to be seen, but the dispute highlights an issue that scam victims across the country increasingly face.

This Isn’t Just One Credit Union

While this story centers on one financial institution, the response will sound painfully familiar to many scam victims.

Large banks participating in the Zelle network have repeatedly been criticized for denying reimbursement after customers were manipulated into sending money to criminals. Many institutions argue that because customers technically approved the transfers and authorized the payments.

Victims see it differently.

They weren’t willingly paying a stranger. They were deceived by criminals posing as bank employees, government officials, technical support representatives, or other trusted authorities.

Scammers understand human psychology. They don’t steal money by hacking computers nearly as often as they steal trust.

When financial institutions place the entire burden on customers who were professionally manipulated, many victims feel like they’ve been victimized twice.

The Data Raises Questions

One detail in this case deserves attention.

According to the credit union’s own public statement, confirmed impersonation scams reportedly increased by roughly 100 additional cases per month during the second quarter of 2026.

That suggests hundreds of customers were targeted in just a few months.

When fraud reaches that scale, it raises difficult questions.

Should financial institutions offer around-the-clock fraud assistance?

Should additional safeguards be implemented when customers suddenly begin approving multiple transfers after receiving fraud alerts?

Should stronger authentication be required when transactions originate immediately after suspicious phone calls?

These aren’t easy questions, but they deserve discussion.

How to Protect Yourself

If someone claiming to be your bank calls unexpectedly, assume nothing.

Hang up.

Do not rely on caller ID. It can be spoofed.

Instead, call the number printed on the back of your debit or credit card or visit your bank’s official website to find its customer service number.

Never approve transactions simply because someone says they are “reversing fraud” or “securing your account.”

Banks do not protect your money by asking you to move it somewhere else.

Likewise, never share passwords, one-time verification codes, or online banking credentials over the phone, even if the caller seems to know personal information about you.

If You’ve Already Been Scammed

Act immediately.

Contact your financial institution and report the fraud as soon as possible.

Document every phone call, email, text message, and transaction related to the scam.

File a report with your local law enforcement agency.

Report the incident to the Federal Trade Commission at ReportFraud.ftc.gov.

If your bank denies your claim, don’t assume the matter is over. Ask for a written explanation of the denial. Depending on the circumstances, you may also wish to file a complaint with the Consumer Financial Protection Bureau or consult an attorney familiar with consumer banking laws if significant money is involved.

The Bottom Line

Banks and credit unions frequently remind customers to stay vigilant, and that’s good advice. But vigilance cannot be a one-way street.

As scammers become more sophisticated, financial institutions must evolve their fraud prevention efforts as well. Better customer education, stronger real-time protections, improved fraud detection, and meaningful support for victims should become standard practice, not optional features.

Consumers certainly have a responsibility to be cautious.

But when criminals can convincingly impersonate a financial institution, use its phone numbers, mimic its text messages, and exploit information that appears to come from somewhere inside the financial system, expecting ordinary customers to shoulder all the blame is neither realistic nor fair.

Scammers should not be rewarded for becoming more sophisticated.

And scam victims should not have to fight two battles: one against the criminals and another against the institution they trusted to protect their money.