The Customer Service Number in Your Google Results Might Be a Scam

The Customer Service Number in Your Google Results Might Be a Scam

It's a Tuesday morning and your credit card statement has a charge you didn't make. You open Google, type "[bank name] customer service number," and call the first result. The person who answers knows your card type, confirms the charge is on the account, and says they need your full card number to process the reversal.

You're already inside a scam — and you found the number yourself.

That number wasn't your bank's. It was planted in a fake directory listing, optimized to appear in search results, and surfaced by Google's AI Overview as if it were authoritative. The Washington Post documented this exact pattern in August 2025, tracing fake numbers appearing for airlines, banks, and cable companies. By February 2026, Marketplace was reporting that AI search tools were making it systematically worse — pulling scammer-planted numbers from obscure sites and presenting them as definitive answers.

The mechanism is real, it's spreading, and it catches people who know better because it exploits the infrastructure they reasonably trust.

How the Scam Actually Works

The underlying attack is called SEO poisoning — manufacturing a fake presence that search algorithms treat as authoritative.

Scammers build hundreds of fake "customer service directory" pages, review aggregators, and forum posts, each listing their own phone numbers alongside legitimate company names. They're not building websites for you to visit; they're building content for search engines to index. Flood enough low-quality directories with the same fake number, and the algorithm eventually treats it as consensus.

AI search amplified this in a specific way. Google's AI Overview, Perplexity, and ChatGPT don't just show you ranked links — they synthesize an answer. When those systems pull from dozens of scammer-seeded sources and present a phone number as the answer to "what is [bank] customer service," the presentation carries implicit confidence. It reads like a fact.

The call script that follows is engineered to feel like real customer service:

They answer professionally using the company's actual name. First impression confirmed.

They verify your identity — name, card type, last transaction. This feels normal because real reps do this too. What's actually happening is data collection.

They find a problem. A fraud alert. A suspended account. An overcharge that needs reversal. Whatever the hook, it requires your immediate attention.

They resolve it with a payment request. Full card number to process a refund. A fee to unlock your account. A "security deposit" via gift card. Remote access to "fix" the issue directly on your device.

None of those resolution steps are real customer service. But you've now been on the phone for ten minutes with someone who sounded completely legitimate — and the request arrives wrapped in context that makes it feel like the next logical step.

Why It Catches People Who Know Better

The tech support popup scam has an obvious tell built into it: you didn't ask for it. A browser alert claiming your computer has a virus arrived uninvited, which — for anyone with a little scam awareness — already marks it suspect.

This scam inverts that entirely. You initiated the search. You needed help. You went looking for the number. When you found it, your guard was lower than it would be for anything that contacted you first, because you were the one in control.

And if you've dealt with real customer service before — where an agent does verify your identity, does know your account details, does escalate to a supervisor — the familiar rhythm of those interactions is exactly what the scam is imitating. You've been trained by legitimate experiences to accept the script as normal. The scammer knows this and runs it precisely.

The Red Flags in Plain Sight

None of these need to be present in combination. One is enough to stop and verify independently.

The search result source isn't the company's official website. Google's AI Overview cites sources — look at them. If the phone number is sourced from helpline-directory.net or customer-care-numbers.info rather than chase.com or delta.com, it is not the company's number.

You didn't land on the company's actual domain. Before calling any number from a search result, check what you actually clicked. If the URL isn't the company's primary domain, find a different source.

They ask for payment to resolve your issue. Banks, airlines, utilities, and streaming services do not charge fees to process refunds, investigate fraud, or unlock accounts. Any payment request on a customer service call — gift cards especially, automatically — is the scam.

They want remote access to your device. No legitimate customer service rep asks to install software on your computer or connect to your screen. This is not a thing real enterprise support does.

They ask for your full card number. Real reps verify the last four digits. That's the standard. A request for the full number, expiration date, or CVV is not a verification step.

The wait time was suspiciously short. Real customer service lines for major banks and airlines have hold times measured in minutes. A line that answers in one ring before you've finished your first thought should give you pause.

They escalate urgency. "Your account will be locked in 30 minutes" or "this has to be resolved before you hang up" is pressure designed to stop you from doing the one thing that protects you: calling back through a verified number.

How to Find the Real Number

This takes less than a minute and eliminates the risk entirely:

Type the company's URL directly into your browser. Don't search for it — type it. Go to chase.com, united.com, comcast.com. Find Contact or Help from the official site.

Look at the back of your physical card. Banks put their customer service number on your card for exactly this reason. It's there; use it.

Check your last statement, bill, or confirmation email. Numbers from your actual account communications come from the real company.

Use the company's official app. Most apps have a built-in Help or Contact function that routes directly to real support.

If you've found a number through search and want to verify it before calling, run it through Cautellus's free scam number lookup. It's free, no account needed, and cross-references reported scam numbers against community reports and threat databases.

If You Already Called the Wrong Number

First: this scam works precisely because it looks legitimate. Getting this far is not evidence of carelessness — it's evidence that the scam is well-built.

If you gave card or banking information: Call your bank's real number — the one on the back of your card — right now. Card charges can sometimes be reversed if caught fast. Explain that you gave information to a fraudulent customer service line.

If you allowed remote access to your device: Disconnect from the internet immediately. Change all passwords from a different device, starting with your email and bank accounts. The full recovery checklist is at our post-scam recovery guide.

If you sent money through Zelle, Venmo, or CashApp: File fraud claims immediately with the platform. Then see our payment app scam recovery guide for the specific steps that give you the best chance of reversal.

Report to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov. These reports go to investigators who actively track phone-based fraud operations. Do it even if the amount seems small.

If anyone contacts you afterward claiming they can help you recover what you lost — that is the follow-up scam, which specifically targets recent fraud victims. Hang up.

The safest customer service number is always the one on the back of your card.

FAQ

How do I find a company's real customer service number without using a search engine? The back of your physical card for banks. The company's official app help section. The company's website by typing the URL directly — not by searching. For utilities and insurance, your statement or policy documents have the number. Avoid clicking search results that land on third-party directories — those are where scammers plant fake numbers.

What should I do if I already called a fake number and gave them information? Act immediately. If you gave card or banking details, call your real bank using the number on your card right now. If you gave remote access, disconnect from the internet and change passwords from a separate device. Report to the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov. See our full post-scam checklist for a complete recovery walkthrough.

Why does Google show scam phone numbers? Scammers publish fake numbers on dozens of low-quality directory sites and forum posts to manufacture a false signal of consensus that search algorithms treat as authoritative. AI Overviews make this worse by presenting synthesized answers with additional confidence, without always distinguishing official company sources from scammer-seeded content. Google has acknowledged the problem; it hasn't fully solved it.

Can I verify a number before I call it? Yes. Check what website the search result links to — is it the company's official domain, or a third-party directory? You can also run any number through Cautellus's free scam number lookup before calling. The most reliable protection is to source numbers from official channels, not search results.

Do legitimate customer service reps ever ask for payment over the phone? Almost never, and never in the specific ways scams demand. A real rep will not ask you to pay a fee to process your refund, unlock your account, or resolve a security alert. They will not ask for gift cards, wire transfers, or cryptocurrency. Any payment request framed as a resolution step on a customer service call should be treated as a scam until proven otherwise by calling back through a verified number.

Is this the same as a tech support popup scam? Related, but structurally different. Tech support popups contact you uninvited — a fake browser alert sends you to a scammer. This scam runs in reverse: you searched for a legitimate company's number, and the result was planted. People who know to distrust popups still fall for search-based versions because they initiated the contact themselves, which disarms the usual suspicion reflex.

---

Sources: Washington Post, "Beware of this customer service scam in Google's AI Overviews," August 2025; Marketplace, "The new website cloning scam that's driven by AI," February 2026; FTC, ReportFraud.ftc.gov; FBI IC3, ic3.gov