When a Company Calls You First: A Callback Routine That Works
A caller says they are your bank, Amazon or a government office. A short script for ending the call and reaching the real organization on a number you trust.
You do not have to decide whether the caller is genuine. You only have to decide to hang up and reach the organization yourself, which works whether the caller was real or not.
The phone rings, the screen shows a bank’s name, and a calm voice mentions “suspicious activity.” Everything about the call is built to make you stay on the line and solve the problem with the person who started it. The routine below makes the opposite move: it ends the call and rebuilds contact from your side.
The four steps
- Get the basics, then hang up. The FTC’s January 2026 alert on unexpected calls says to “get some basic details, then hang up”: which company is calling and what the problem is.
- Find a number you trust. Use the official app or website, or call the number on a recent statement or the back of your card. The FTC warns against searching for the number, “because scammers often buy paid search ads so their fake numbers appear at the top of the listings.”
- Call and ask whether there is a real issue. You are now the caller, so you control who you reach.
- Tell someone you trust. The FTC notes that “no legitimate fraud department will tell you to keep the call a secret.”
A script for each moment
| Moment | Say |
|---|---|
| They name a company | “Which department, and what’s the case reference? I’ll call you back through the official line.” |
| They say it’s urgent | “If it’s urgent, it will still be there in ten minutes.” |
| They offer a number to call back | “I’ll use the number on my card.” |
| They say don’t tell anyone | “Then I’m hanging up. I’m talking to someone first.” |
| They ask for a code you got by text | “No.” Then end the call. The FTC says never share verification codes. |
Where the trusted number comes from
| Caller says | Reach the real one through |
|---|---|
| Your bank or card issuer | The number on the back of your card or on a statement, or the bank’s app |
| Amazon | Your account in the Amazon app or on its website, not a link or number from the message. The FTC says to check refund or purchase claims by going directly to your Amazon account or app |
| A government agency | A website you type that ends in .gov, found independently. The FTC says it will never ask you to send money or threaten to cut off your phone |
| Your phone or internet provider | The provider’s app or the number on your bill |
| A utility | The number on your bill |
The FTC’s imposter scam guidance states the underlying rule: if you think the message could be real, verify the story using a phone number, website or email address you already know is real, not the contact details in the unexpected message. Also: don’t move your money quickly to “protect” it, because anyone telling you to is a scammer.
An example from this month
On October 22, 2026 the FTC published an alert that the agency “is not calling to deactivate your phone number.” According to the alert, the caller claims to be an FTC official who reads a fake badge ID, says a phone registered in your name was used for scams abroad, threatens to deactivate it, transfers you to a fake police officer, and later demands a “security deposit.” The FTC says a real employee will never threaten to disconnect your phone, ask for money, tell you to keep things secret or text a photo of an ID. The alert also notes that scammers may tell you to look up a police number online and call it, and scammers answer those calls. That is the reason the routine says to find the number in a source you control, not in a search or from the caller.
We cover the follow-up version, where scammers pose as FTC staff to offer help after a loss, in the FTC badge recovery scam post; this article is about your first phone call.
When the number on file may itself be wrong
Do not rely on a number saved from an earlier “call from support.” If your phone’s contacts have an entry added during a suspicious call, delete it. A statement or card from the issuer is the best source. When the bank’s website is the only route, type the address yourself. Our post on a real security alert that carried a scam number shows why even a genuine-looking alert deserves an independent number.
If you already gave them something
- Call your bank on the card number and say what you told the caller.
- If you read out a code, change the password on that account from a fresh tab, using a site you typed.
- If you let someone control your device remotely, disconnect it from the internet, and ask a trusted person or the manufacturer how to check it.
- If you sent money, tell the payment provider immediately and report it at ReportFraud.ftc.gov.
You can keep the routine on a card by the phone: hang up, find the number, call, tell someone.
Callers who know your details
A caller may recite your name, your address or the last four digits of a card. That proves less than it seems, because personal details leak through breaches and public records. The routine does not depend on whether they sound informed. It depends on who starts the next call. If you start it, you choose who answers.
Practice it once
Ask someone at home to read the table above aloud as an unexpected caller while you reply with the scripted lines. It takes two minutes, and it makes the sentence “I’ll call you back on the number I have” something you have already said. People who have said it once find it easier to say when it counts.
Write the sentence on a card and keep it by the landline or tape it to the back of your phone case. For a parent or grandparent, put the real bank number on the same card.
When you cannot hang up
Sometimes the caller is someone you cannot just leave, such as an elderly parent who is already in the middle of the story on the phone. Offer to take over: ask them to put the caller on hold or hand you the phone, say you will call back, and end the call yourself. The FTC’s advice to talk to a trusted friend or family member is also written for this moment.