# Phone scams: calls, codes and fake platforms > How phone scams work: the scripts fraudsters use, the rules that stop them, and what to do in the first hour if you've been scammed. - Course: [Personal Finance: Budget, Safety Cushion, Debt and Investing](https://productovi.com/courses/personal-finance.md) - Module: How to protect what you have? - Lesson 26/32, ~16 min - Source: https://productovi.com/courses/personal-finance/fraud-calls-and-codes ## A call between two lessons **Alex Tutor:** Dana's money today: you keep helping her, and she has just had a worrying call. **Dana:** A man just called from “the bank's security service”. He knew my name and my card's last four digits. Someone was taking a loan in my name, he said, so I had to move my money to a “safe account”. I hung up, but I'm shaking. **Alex Tutor:** You did exactly the right thing: that was a classic phone scam. As of 2026, the National Bank lists calls from a fake “security service” among the most common fraud schemes in Ukraine. **Sofia:** But he knew her name and the card digits. Doesn't that show it was the bank? **Alex Tutor:** No. Names, phone numbers and card digits leak from deliveries, shops and old data breaches. And a real bank never asks you to move money to a “safe account”. **Dana:** He also said I'd get an SMS code and should read it to him “to confirm it's really me”. **Alex Tutor:** That code is the key to your account: whoever reads it out hands over the key. Never share a one-time code, your PIN, the three digits on the back of the card or a banking password. Not with anyone. > **Exercise:** A caller says he's from your bank. Which requests mean you should **hang up at once**? Select all that apply. ## Why clever people fall for it **Dana:** I'm not naive. Why did I nearly do it? **Alex Tutor:** Because the script works on feelings: fear (“your money is in danger”), hurry (“in the next ten minutes”) and authority (“security service”). That's **social engineering**: tricking a person instead of hacking a system. **Alex Tutor:** According to the National Bank, card fraud cost people in Ukraine about 1.4 billion UAH in 2025. Most of it happened online, mostly through tricks like this call rather than hacking. The average loss was about 5,500 UAH. **Sofia:** So the defence is a rule, not being smart. **Alex Tutor:** Exactly. One rule covers almost every call: hang up and call the bank yourself on the number printed on your card. If the problem is real, the bank will still be there. > **Exercise:** A caller says a loan is being taken in your name right now and the bank needs to act. What is the **safest next step**? ## Other scripts on the list **Dana:** Yesterday my mum got a message: “You have been granted a payment. Follow the link to receive it.” **Alex Tutor:** Another classic: fake “aid” or “compensation”, lately also after missile strikes. The link opens a copy of a bank or state site that asks for card details and codes. That's **phishing**. **Alex Tutor:** Three more from the National Bank's list: investment offers in messengers that pay a small “profit” first; moving your number to a new eSIM to reach your banking app; and reused old numbers of people now abroad. **Sofia:** The eSIM one is scary. What protects against it? **Alex Tutor:** Keep the number your bank knows active and in your hands; change it at the bank before giving it up. Turn on every login confirmation the bank offers. If your phone loses signal for no reason, call the bank from another phone. > **Exercise:** Match each scheme with the sign that gives it away or the habit that stops it. ## What to do if you've been scammed: the first hour **Dana:** And if I had read out the code? What then? **Alex Tutor:** Then minutes matter. Call the bank at once to block the card and app access, and report the transfers. Then report to the police on 102 and through the cyber police's online form. Change passwords from a device you trust. **Sofia:** Will the bank give the money back? **Alex Tutor:** Don't count on it. It depends on the case and on the rules at the time, and it's usually much harder when you gave the code yourself. Prevention beats recovery. **Alex Tutor:** Keep the evidence as well: the number that called, the time, screenshots of the messages and of the transfers. > **Exercise:** You realise you've read out a code and money is leaving your account. Put the steps in order. ## A rule for the whole family **Dana:** My mum will get these calls again. She's 68 and trusts anyone who sounds official. **Alex Tutor:** Agree on a family rule in advance, while nobody is scared. For example: no money moves after an incoming call until she has hung up, called the bank herself and phoned you. **Sofia:** And a code word for calls from “a relative in trouble”? **Alex Tutor:** Good idea: a word only the family knows. And keep the cushion in a separate account from the everyday card, so a stolen card can't reach it. > **Exercise:** **True or false:** a real bank employee will never ask you to read out a one-time code from an SMS. ## Your turn: a card for the fridge **Dana:** Can you write it down for her? Short, in big letters, to stick on the fridge next to the phone. **Alex Tutor:** Make it something she can follow while frightened: what never to share, what to do instead, whom to call. **Sofia:** Rules, not explanations, then. **Alex Tutor:** Yes. Add the bank's number from the back of her card, and Dana's number. Never copy a bank's number from a message. > **Exercise:** Write the card for Dana's mother: 4–6 short lines she can follow while frightened. Include what never to share, what to do after any “bank” or “aid” call or message, and whom to call. > **Key ideas** > > - Never share a one-time code, PIN, the three digits on the back of the card or a banking password. A real bank never asks you to move money to a “safe account”. > - Knowing your name and card digits proves nothing: that data leaks. > - Fraud works on fear, hurry and authority (**social engineering**). The defence is a rule: hang up and call the bank yourself on the number on your card. > - Common scripts (National Bank list, 2026): fake “security service” calls, fake aid or compensation links (**phishing**), investment offers in messengers, eSIM swaps, reused numbers of people abroad. > - If money is gone: block via the bank at once, report the transfers, call 102 and use the cyber police's online form, change passwords, keep evidence. Don't count on getting it back. > - Agree family rules in advance, and keep the cushion away from the everyday card. **Alex Tutor:** Next time: what your family would need to find and know if something happened to you. - Previous lesson: [Insurance: big losses first](https://productovi.com/courses/personal-finance/insurance-big-losses-first.md) - Next lesson: [Documents and access: if something happens](https://productovi.com/courses/personal-finance/documents-and-access.md) --- Productovi Learning. Free, no sign-up needed to read.