Don’t Get Scammed: What to Do If Someone Asks for Your Banking Login Code

07 Sep Don’t Get Scammed: What to Do If Someone Asks for Your Banking Login Code

Have you ever received a "urgent" text or call from your bank or a payment app like Apron, claiming your account is at risk?

In the world of modern business, we rely on digital tools to keep things moving. Whether it’s payroll services, bookkeeping, or VAT returns, apps like Xero and Apron make our lives incredibly easy. But that convenience comes with a target on our backs.

Recently, our partners at Apron , the platform many of you use to streamline your accounts payable , issued a serious security alert. They’ve seen a sharp rise in "bad actors" targeting business owners with sophisticated phishing scams.

This isn't just about Apron, though. These tactics are being used to target almost every major UK bank and financial tool. If you handle your firm's finances, you need to know the red flags before a single click costs you thousands.

The Golden Rule: Your Code is Yours Alone

Did you know that no legitimate financial institution will ever ask you for your login code over the phone or via text?

This is the single most important thing to remember. Whether it’s a one-time login code, a 6-digit app passcode, or a 2FA (Two-Factor Authentication) code sent to your phone, that number is for your eyes only.

Think of it like the keys to your office. You wouldn't give them to a stranger who called you up claiming to be from the security company, right? The same logic applies here.

Apron (and your bank) will NEVER ask you to:

• Read out a code over the phone.
• Type a code into a website linked from a text message.
• Take a screenshot of a code and email it to "support."
• Approve a login request that you didn't personally trigger.

If someone asks for this, stop immediately. It is a scam.

How the Scam Usually Plays Out

How do these "bad actors" actually get through to busy business owners?

They rely on three things: Urgency, Authority, and Fear.

The scam usually starts with a notification. It might be a text saying, "Unusual activity detected on your Apron account. Verify your identity now to prevent a block," or a phone call from someone claiming to be from your bank's "Fraud Department."

They sound professional. They might even know your name or your business name. They’ll tell you that your money is at risk and that you need to "take action immediately" to keep it safe.

The "Move Your Money" Trick

One common tactic is telling you that your current account is "compromised" and you need to move your funds to a "safe account" provided by the bank. Banks will never ask you to move money to keep it safe. If you hear this phrase, hang up.

The Remote Access Trap

Sometimes, the scammer will ask you to install software (like AnyDesk or TeamViewer) so they can "help you fix the issue." Once you do this, they have full control over your computer. They can see your passwords, access your Xero account, and drain your accounts while you watch.

Red Flags You Can't Ignore

So how do you tell a real security alert from a fake one?

While scammers are getting better at mimicking brand logos and language, they almost always follow a specific script. Be on high alert if any "support person" asks you to:

1. Add a new device: They might ask you to "verify" a new device they are trying to link to your account.
2. Screenshot your screen: They want to see the 2FA codes popping up on your display.
3. Approve a "test" payment: There is no such thing as a test payment that requires you to authorize a real move of funds.
4. Ignore warnings: If your app or browser shows a "Potential Scam" warning, and the person on the phone tells you "it's just a glitch," they are lying.

Actionable Steps to Protect Your Business

What should you do right now to make sure your firm is secure?

You don't need to be a tech genius to protect your business. A few simple habits can make you a much harder target for criminals.

• Turn on 2FA Everywhere: If an app offers Two-Factor Authentication, use it. It’s an extra layer of protection that requires both your password and a code from your phone.
• Only Use Official Paths: Never click links in SMS or emails to log in. Always type getapron.com or your bank’s URL directly into your browser, or use the official mobile app.
• The "Hang Up and Call Back" Rule: If you get a suspicious call, hang up. Wait five minutes (to ensure the line has actually cleared) and call the official number on the back of your bank card or the company’s official website.
• Use the 159 Service: In the UK, you can dial 159 to be connected directly to your bank's fraud department if you think you’re being targeted.

What to Do If You Think You’ve Been Scammed

If you’ve shared a code or clicked a link, don't panic , but do act fast.

If you suspect you've accidentally given a scammer access to your Apron or banking details:

1. Contact Support Immediately: For Apron users, email support@getapron.com right away. For banks, call their emergency fraud line.
2. Change Your Passwords: Update your password for your financial apps and your primary business email.
3. Check Your Registered Devices: Log into your accounts via a secure device and "remove" any devices you don't recognise.
4. Tell Your Accountant: Let us know! If we handle your VAT returns or CIS accounting, we can keep an eye out for unusual activity and help you document the incident.

We’re Here to Help You Stay Safe

At Harrison's Accountancy, we act like our clients' own CFO. That means we don't just care about your tax returns; we care about the overall health and security of your business.

Scammers thrive on making people feel anxious and rushed. If you ever receive a request that feels "off" or a notification that worries you, please don't hesitate to reach out to us. We’d much rather spend ten minutes double-checking a request with you than see your hard-earned money disappear.

Stay vigilant, keep your codes private, and let’s keep your business finances secure.

Need advice on securing your business's financial processes? Get in touch with us today.