The Callback Scam: Missed Calls and "Call This Number" Traps
A missed call from a number you do not recognize, or a voicemail saying "this is your bank, call us back about a problem with your card." Calling back seems polite and careful, which is exactly why it is the trap. This page is how the callback scam works, the two-minute rule that stops it, and what to do if a parent has already called back.
you decide who to call, never the caller
The callback scam two-minute rule
The scammer never has to call the parent again: the parent calls them, and caller ID shows a number the parent chose, which feels safe. The number in the message is the trap.
- The two versionsOne-ring and voicemailThe missed-call version rings once from a strange area code and lands on a premium-rate line; the voicemail version sounds urgent and official and lands on a fake agent who asks for the card number, PIN, or a verification code.
- The ruleNever call the number in the messageLook up the real number yourself: the back of the card, the official website, or the phone book. Call that number and ask one question: "Did you contact me?"
- If the parent called backWhat happened in the call decidesOnly talked: nothing lost yet, but expect the scammer to call again. Gave a card number or PIN: call the issuer now and reissue. Gave a verification code: treat every account as at risk. Money moved: the first hour matters.
- Make the next one failSilence unknown callersBlock unknown and international callers where possible, use call-blocking for the landline, and teach the one sentence: "I call back numbers I look up myself, never numbers from a message."
The rule, in one sentence: you decide who to call, never the caller. If a message asks you to call a number back about money, look up the official number yourself and call that instead. The number in the message is the trap.
Not the page you need? This page covers callback scams generally. If the parent got a message saying their card was used and telling them to call a number in the message, see the bank fraud alert callback guide.
How the callback scam works
There are two common versions, and both make the parent do the work:
- The missed-call version ("one-ring" scams): a call rings once and stops, from a number with a strange area code, often an international one. The parent calls back out of curiosity or politeness, and lands on a premium-rate line or a fake agent who starts the real scam.
- The voicemail version: a message that sounds urgent and official ("your card has been suspended," "the IRS is filing a claim," "your account showed unusual activity, call this number"). The parent calls back, and a convincing fake agent asks for the card number, the PIN, or a verification code.
Both versions share one mechanism: the scammer never has to call the parent again. The parent calls them, which means caller ID shows a number the parent chose, and that feels safe. It is not. The scammer controls the number the message provides.
The two-minute rule (teach this to your parent)
Print this and put it by the phone. It covers every version of the callback scam:
Why this scam targets older adults
Three habits make it work: parents are more likely to answer and return missed calls (politeness), more likely to believe a voicemail that sounds official, and more likely to fear that ignoring a bank message causes real trouble. Every one of those instincts is what the scammer is exploiting. The fix is not to be less polite; it is to redirect the politeness to a number the parent chose.
What to do if a parent already called back
Calling back is not the disaster; what happened during the call is. Work through this in order:
- If they only talked, nothing is lost yet. Expect the scammer to call again now that the parent is known to engage: tell the parent to let unknown numbers ring, and do not answer follow-ups from the same number.
- If they gave a card number or PIN, call the card issuer now, from the number on the card, and tell them the card may be compromised. Cancel and reissue. Do not wait for a mystery charge.
- If they gave a verification code, treat every account as at risk: the code may have been used to reset a password. Start at Your parent's account was hacked: the 60-minute response.
- If money moved (gift cards, wire, Zelle), the first hour matters. See Your parent sent money to a scammer. Now what?
How to make the next one fail
- Block unknown and international callers on the parent's phone where possible (many phones have a "silence unknown callers" setting), and see call-blocking devices and services if the landline still rings.
- Turn on two-factor authentication on email and bank accounts so a card number or code alone is not enough. See Two-factor authentication for parents.
- Agree on the family rule: "If it asks you to call back about money, call me first." One sentence, printed, beats any filter.
Related
- How to verify any message independently: the general method this page applies to calls.
- Impersonation scams: what the fake "bank" or "IRS" agent sounds like once you do call.
- Your parent sent money to a scammer. Now what?: if the call went further than a conversation.
- Call-blocking devices and services: stopping the calls before they start.
Sources
- FTC: Phone Scams (retrieved August 2026)
- FTC: How To Avoid a Scam (retrieved August 2026)
Found an error? Report it.