Matt Gutman investigates crime for a living. The CBS News correspondent has spent years around con artists and courtrooms. And in mid-July 2026, he still spent more than an hour on the phone with one — a caller posing as a Bank of America fraud-protection agent — before the spell finally broke.

If it can nearly happen to a national television journalist, it can happen to anyone. And in July 2026, it was happening to a lot of people at once.

The Call That Almost Worked

Gutman’s caller did everything a real fraud investigator might do. He offered a name and a badge ID. He warned that someone was trying to pull money illegally from Gutman’s account, and that there had been “significant fraud activity” at the very Bank of America branch where Gutman banks. Then came the instruction that is the tell of the entire genre: go into the branch, withdraw everything in cash, and take it with you — because doing so would supposedly “trigger the fraudsters into action.”

Gutman started down that road. What stopped him, by his own account, was a single realisation: “there is no way that this is possibly real, that anybody would use a regular civilian for a sting operation at a bank.” He walked away with no money lost — and a public warning about how convincing it felt. Not everyone who got the same call in July was as lucky.

Same Script, Real Losses

The impersonation playbook comes in two flavours that increasingly blur together: the bank impersonator and the government impersonator. Both manufacture fear, then offer themselves as the only way out.

In Zimmerman, Minnesota, an elderly resident handed over more than $13,000 in cash after callers claiming to represent his bank and the FBI convinced him his money was in danger. On Hawaii Island, police issued warnings in mid-July after a resident lost a large sum to a caller posing as the Federal Communications Commission, who claimed the victim’s phone number was tied to a money-laundering case before transferring him to a second scammer impersonating a Washington, D.C. police officer. The victim was told an arrest warrant had been issued, that bail was set at $1.75 million, and that he faced 7 to 15 years in prison unless he cooperated — all communicated, tellingly, through WhatsApp.

Banks are watching the same curve. One regional lender warned in July of a “huge spike” in impostor scams over the prior six to eight months — in some cases with fraudsters showing up at customers’ homes to collect cash in person.

Why It Works: Fear, Authority, Isolation

Strip away the details and every version runs the same three levers.

Authority. A badge number, an agency name, a spoofed caller ID reading “Bank of America” or “FBI.” None of it is hard to fake, and all of it short-circuits skepticism. Real credentials can be read off a script; a caller ID can be forged in seconds.

Fear and urgency. Police in Hawaii spelled out the pattern precisely: scammers “create fear and urgency by threatening arrest, criminal prosecution, frozen bank accounts or seizure of assets.” A person who believes they have minutes to avoid jail or bankruptcy stops thinking and starts complying.

Isolation. The move to WhatsApp or another messaging app is not incidental — it pulls the victim off the phone network their bank and family can see, into a private channel the scammer fully controls, often for hours. Gutman’s “over an hour” on the line is the norm, not the exception; the longer they keep you talking, the less room you have to check the story with anyone who might break it.

The Tells That Never Change

However sophisticated the impersonation, a handful of instructions give it away every time — because no legitimate institution ever issues them:

  • “Withdraw your cash / buy gold / move it to a safe account.” No bank or agency will ever ask you to liquidate, hand over, or relocate your money to protect it. That request is the fraud, full stop.
  • “Keep talking only on WhatsApp.” Government agencies and banks do not run investigations exclusively through a messaging app. A demand to switch channels and stay on the line is a red flag by itself.
  • “Pay to avoid arrest.” No one is bailed out of a criminal case by wiring money, buying gift cards, or sending crypto. Bail is not collected by phone.
  • “Don’t tell anyone — it will compromise the operation.” Secrecy is the scammer’s oxygen. The instruction to keep quiet exists solely to keep you away from the person who would tell you it’s fake.

Protecting Yourself

The good news is that these scams collapse the instant you break contact and verify independently. Build the reflex before the call comes.

  • Hang up and call back on a number you find yourself — from the back of your bank card or the agency’s official website, never a number the caller gives you. A real investigator will not object.
  • Adopt Gutman’s question. Before you act, ask: would a real bank or police force actually ask a private citizen to do this? The answer is almost always no.
  • Add a 10-minute rule and a trusted second opinion. Tell yourself in advance that any request to move money gets a mandatory pause and a call to a family member or your banker. Scammers rely on the pause never happening.
  • Protect the people most targeted. Older relatives absorb the heaviest losses. Talk through these scripts with them now, before a caller does — and make clear that falling for one is common, not shameful, so they’ll come to you early if it happens.
  • Report it, even a near-miss, to your bank, local police and the FTC at reportfraud.ftc.gov. Fast reporting is what gives investigators a chance to freeze funds and flag the number.

Matt Gutman’s story ended with a warning instead of a loss — but only because one skeptical thought arrived before the withdrawal did. In July 2026’s impersonation wave, that thought is the whole defence. Slow down, hang up, and check the story with someone the scammer can’t reach. The call is built to stop you from doing exactly that.