Some real calls from banks, doctors, and government agencies sound suspicious. Here's how to verify without hanging up on important calls.
Bank fraud department calls are genuinely confusing because they behave exactly like scam calls in some ways: they're unexpected, they reference account activity you didn't initiate, and they ask you to take immediate action. The critical difference is in what they ask you to do. A legitimate bank fraud call will: confirm the last four digits of your card, read you the suspicious transaction details, and ask if you made them. What a legitimate bank fraud call will NOT do: ask for your full card number, PIN, full SSN, or online banking password. If the caller asks for any of these, hang up.
The safest protocol for any call claiming to be from your bank: be politely firm. Say, "I'll need to verify this is actually my bank. I'm going to hang up and call the number on the back of my card." Then do that. If the call was real, you'll reach your bank's fraud department and they'll have notes on the transaction inquiry. Banks understand this protocol and their legitimate fraud teams will not object — in fact, many bank fraud call centers explicitly tell customers to call back on the card number if they have any doubt. Chase, Bank of America, Wells Fargo, and Citibank all publish the fraud line numbers on the back of their cards specifically for this verification purpose.
One scenario that catches people off-guard: on older landlines and some VoIP services, the caller controls the disconnect, meaning the line stays "live" even after you think you've hung up. A scammer stays on the line; you "hang up" and call your bank, but you're still connected to the scammer who plays a fake bank dial tone. The fix: hang up, wait 60 seconds, then call from a different phone (or your cell if you were called on a landline). Modern cell phones do not have this vulnerability, but it remains relevant for traditional landline users.
Healthcare providers routinely use automated calling systems for appointment reminders, prescription pickup notifications, and preventive care outreach (flu shot reminders, annual wellness exam reminders, mammogram scheduling). These calls are legal under the TCPA's healthcare exemption and do not require prior express written consent beyond the existing patient relationship. The calls often come from generic-sounding automated systems, may display an unfamiliar number (the outreach vendor rather than your doctor's direct line), and sound robotic — traits that superficially resemble spam.
Distinguishing a real medical reminder: it will reference your actual provider name and the specific appointment date and time you scheduled, and will offer a callback option using the provider's published number. It will not ask for payment information, insurance numbers, or personal details during the recorded message. If you're unsure, hang up and call your doctor's office using the number on your insurance card or on the number you used when scheduling the appointment. CVS calls patients when prescriptions are ready using automated systems that display the local pharmacy's number. UnitedHealth conducts nurse line outreach to members with chronic conditions. These are not scams, but they can be verified: call the main customer service number for your health plan and ask whether the specific outreach call you received is one they make.
Hospital billing departments generate another category of legitimate-but-suspicious calls. Medical debt calls from your actual hospital or medical group's billing department are real but can be verified: the billing department can provide your account number and the specific date and provider of the services billed. If a caller claims to be from a hospital billing department but cannot specify the service date or provider name, it may be a medical debt collection scam (which uses the same calls to collect debts you don't actually owe). Verify any medical billing call by calling the hospital's billing department using the number on your Explanation of Benefits from your insurer.
Not all government calls are scams — and being overly skeptical of real government contact can cause you to miss important notifications. Legitimate government calls include: jury duty confirmation calls from your local courthouse; census bureau calls from Census Bureau interviewers conducting the American Community Survey (ACS); Social Security Administration automated benefit notices (though SSA does not call to demand payment); IRS Taxpayer Assistance Center callbacks when you've scheduled a callback through IRS.gov; and state unemployment department calls for required eligibility verification.
Distinguishing real government calls from imposters: real government callers never demand immediate payment by gift card, wire transfer, or cryptocurrency. The IRS sends certified mail before any phone contact about a tax debt. Census Bureau interviewers can be verified at the Census Bureau's toll-free line 1-800-523-3205, and you can verify any survey is real at census.gov/about/contact-us/tell-us-about-a-survey.html. Jury duty calls from your courthouse will be followed by written summonses — courts use the mail for official legal process. If you receive a call about your jury duty status, look up your county court's phone number independently and call them.
The Veterans Administration (VA), Social Security Administration, and Medicare communicate primarily by mail and through secure online portals (VA.gov, SSA.gov, Medicare.gov). Outbound calls from these agencies are typically in response to something you've initiated — a benefits application, a scheduled appointment, or a callback you requested. If you receive an unsolicited call claiming to be from any of these agencies involving your benefits, financial information, or account access, treat it with the same skepticism as any other unsolicited government call and verify by calling the agency's official number from their website.
The hang-up-and-call-back method is the universal verification protocol, but it only works if you use the right callback number. The callback number cannot be one that the caller gave you — that's the number the scammer controls. The verification number must come from an independent source: the back of your card, the company's official website (found by typing the URL yourself, not by clicking a link the caller sent), your previous paper statements, or a nationally published directory. For IRS questions, the official taxpayer assistance line is 1-800-829-1040. For Medicare questions: 1-800-MEDICARE (1-800-633-4227). For Social Security questions: 1-800-772-1213.
For calls claiming to be from utilities (electric, gas, water), look up your utility's customer service number from your actual bill — not from Google's first result, which can surface scam numbers in paid search positions. For calls about medical debt, use the number on your hospital billing statement or your insurance EOB. For calls about your bank or credit card, use the number on the back of your card or on your monthly statement. For any government agency, the official website (.gov domain) will have the official contact number. The .gov domain is the key indicator — any website claiming to be a government agency without a .gov domain is not an official government resource.
For businesses that call you, asking for verification information before providing any personal information is always appropriate and professional. Say: "Before we continue, I'd like to verify I'm speaking with [company name]. Can you confirm the last four digits of my account number?" A legitimate company representative can do this. A scammer who doesn't actually have your account information cannot. This simple verification request costs you nothing and immediately distinguishes legitimate callers from imposters who are using your publicly available information (name, phone number, address) to impersonate your actual service providers.
The hang-up-and-call-back rule is the single most effective consumer protection behavior against phone fraud. Simple form: when you receive any inbound call about a financial, legal, medical, or government matter that you did not initiate, do not handle the matter on that call. Instead, hang up, find the organization's official phone number through an independent source, and call back. This rule protects you regardless of what the caller says, what caller ID shows, or how urgent the matter seems — because all of those elements can be faked.
The rule fails in two edge cases. First, the landline hold exploit: on some landlines, the caller can stay on the line after you hang up, so when you "call back" on the same line, you're still connected to the scammer. Solution: wait 60 seconds and use a different phone. Second, the caller gives you a "real" organization's main number to call back, but the number is subtly wrong (one digit changed). Solution: look up the callback number yourself from an independent source rather than using any number the caller provided, even if it sounds like the right number. Type the company's website URL yourself and use the phone number from that official page.
Practice the rule before you need it. The scenario where it's hardest to apply is the one where it's most important: when you feel scared, confused, or certain the call is real. Commit to the rule in advance — "I will always hang up and call back before discussing anything financial or personal, no matter how convincing the call seems." Tell family members about the rule so they can remind each other. Research on fraud prevention consistently shows that pre-committed behavioral rules are more protective than in-the-moment judgment, because in-the-moment judgment is exactly what scammers are trained to impair through fear, urgency, and authority impersonation.
RELATED GUIDES
LOOKUP BY AREA CODE