Bank, card and payment-app fraud scams

Someone pretending to be your bank's fraud team asks you to "verify" a password, card number or the code they just texted you.

What it often looks like

"Unusual sign-in on your account. Verify now or your account will be locked."

"This is the fraud department. We've stopped a suspicious charge. Please read me the code we just sent."

"I sent you money by mistake on a payment app. Can you send it back?"

The caller or message sounds calm and helpful. They say they're protecting you, which lowers your guard.
They may already know a little about you (your name, your bank, the last digits of a card) from data leaks. That makes them sound legitimate.
The goal is to get something that lets them into your account: your password, card number, or a one-time code. A one-time code is the key that lets them sign in or approve a payment as you.
Some ask you to move your money to a "safe account". There is no such thing; the account belongs to the scammer.
With payment apps, a scammer may send money with a stolen card, ask you to "return" it, and then the original payment is reversed, leaving you out of pocket.

Any request for your password, PIN, full card number or a one-time code
Pressure to act right now so the account isn't locked or the charge doesn't go through
Being asked to move money to a "safe" or "protected" account
A caller ID showing your bank's name (caller ID can be faked)
A stranger asking you to send back money they say they sent by mistake

Hang up, or close the message. Then call the number on the back of your card or open your bank's official app.
Never read a one-time code to anyone who contacted you. Codes are for you to type in, not to say out loud.
Your bank already has your card number and will never ask for your password or PIN.
For a mistaken payment-app transfer, don't send money back yourself. Ask the payment app's support (from inside the app) to reverse it.

It happens to careful, smart people. Acting quickly helps most.

Call your bank right away using the number on your card or statement, and tell them what happened.
Change your online banking password from the official app or website, and turn on sign-in alerts.
If you moved money, ask the bank to try to recall it. The sooner, the better.

Remember: If someone contacts you and asks for a code, password or card number, it's a scam. Hang up and call the number on your card.

AARP's free Fraud Watch Network Helpline (877-908-3360) will also talk you through what to do, whether or not you're a member.