Businesses targeted by fraudsters impersonating Butterfield Bank investigators
The Bermuda Police Service (BPS) is advising businesses and corporate banking customers to remain vigilant following a sophisticated telephone-based fraud campaign targeting Bermuda businesses between 20th and 21st October 2026.
The scam, known as vishing (voice calls), involves criminals impersonating bank fraud investigators to deceive customers into disclosing information, granting remote access to their computers, or transferring funds to accounts controlled by the fraudsters.
Information received indicates that the perpetrators spoofed Butterfield Bank’s main Bermuda switchboard number, 441-295-1111, making the calls appear to originate from a legitimate bank telephone number.
During these calls, the fraudsters claimed that suspicious international payment activity had been detected on the victims’ accounts. To establish credibility, they reportedly used customer account information and fabricated fraud case reference numbers.
Victims were then persuaded to speak with individuals posing as technical support personnel and, in some instances, instructed to install remote access software, including AnyDesk, through malicious websites.
The criminals subsequently used these methods to facilitate unauthorised international wire transfers or instructed victims to move funds to purported “safe accounts.”
How the Scam Works
The BPS wishes to highlight several tactics identified in this campaign:
Caller ID spoofing: Fraudsters manipulate the telephone number displayed on a recipient’s phone to make it appear as though the call is coming from a legitimate bank.
Impersonation: Callers claim to be bank fraud investigators responding to suspicious transactions.
False reassurance: The use of customer information and fabricated case reference numbers is intended to make the communication appear genuine.
Remote access: Victims are directed to fraudulent websites or instructed to install software that allows criminals to access their computers.
Fraudulent transfers: Victims are persuaded to authorise international payments or move money to accounts described as “safe” or secure.
Two websites identified in connection with this campaign are:
butterfieldcontact[.]web[.]app
butterfieldhelpdesk[.]web[.]app
These websites have been taken down. Members of the public are advised not to visit these sites or download software through links provided during unsolicited calls.
Protect Yourself and Your Business
The Bermuda Police Service reminds the public that a telephone number displayed on your caller ID is not proof of the caller’s identity. Businesses and individual customers are urged to follow these precautions:
End suspicious calls immediately. If someone contacts you unexpectedly claiming to be from your bank’s fraud team, terminate the call.
Verify independently. Contact your bank using a trusted telephone number obtained from its official website, bank card or other verified source. Do not rely on a number supplied by the caller or on the number displayed on your phone.
Never install remote access software at a caller’s request. Do not download applications such as AnyDesk or visit websites provided by an unsolicited caller to investigate alleged fraudulent activity.
Never transfer money to a “safe account”. Legitimate banks will not require customers to move funds to such accounts to protect their money.
Exercise caution with urgent payment requests. Businesses should ensure that employees responsible for initiating or approving payments independently verify unusual requests, particularly those involving international transfers or alleged account security breaches.
Report suspected fraud promptly. If you believe you have been targeted or have disclosed information, installed remote access software or transferred funds, contact your bank immediately and report the matter to the Bermuda Police Service.
Anyone who has installed remote access software at the direction of a suspected fraudster should disconnect the affected device from the internet, where safe to do so, and contact their bank using a verified number from a separate, trusted device. The affected device should not be used to access online banking until it has been checked and secured.
A Message to the Community
The Bermuda Police Service recognises the potentially serious financial consequences of these scams, particularly for businesses handling substantial payments and international transactions.
Criminals are increasingly using sophisticated methods to make fraudulent communications appear legitimate. The combination of caller ID spoofing, personal or account information, and convincing impersonation can make these scams difficult to identify.
The public is encouraged to remain alert, verify unexpected requests independently and share this advisory with colleagues, family members and business associates who may be at risk.
If you receive a suspicious call claiming to be from your bank, do not act on the caller’s instructions. End the call, verify the information independently and report any suspected fraud.
