Scammers are always coming up with new ways to steal personal information. One of the latest scams doesn’t involve downloading a virus or clicking a fake link—it tricks people into changing a setting on their own phone. This scam is often called the “*21 scam.” It works by convincing someone to turn on a phone feature called call forwarding.
Most people have never used call forwarding, and many don’t even know it’s available on their phone. That’s exactly why scammers take advantage of it. In this blog, we’ll explain how the scam works, why it’s dangerous, and what you can do to protect yourself.
What Is Call Forwarding?
Call forwarding is a normal phone feature that sends your incoming calls to another phone number. For example, someone might use it if they’re traveling or want their work phone to ring on their personal phone.
Scammers misuse this feature by convincing people to forward their calls, and sometimes their text messages, to the scammer’s phone instead. That means calls and security codes that are supposed to come to you may end up going directly to the criminal.
How Does the *21 Scam Work?
The scam usually starts with an unexpected phone call or text message.
The scammer pretends to work for a trusted organization, such as:
- Your bank
- Your cell phone provider
- A delivery company
- An online retailer
They’ll tell you there’s a problem with your account or suspicious activity that needs to be fixed right away. To “solve” the problem, they’ll ask you to dial a code followed by a phone number they provide.
The phone number isn’t helping your account, it’s the scammer’s number.
Once you enter the code, you’ve unknowingly told your phone to send your incoming calls to them instead of you.
Codes They May Ask You to Dial
The code depends on your wireless carrier.
AT&T and T-Mobile
- 21 + destination number + #
Verizon
- *72 + destination number + #
US Cellular
- *72 or *73 + destination number + #
These are real call forwarding codes. On their own, they’re not dangerous. The scam happens when someone tricks you into using the scammer’s phone number.
Why Is This So Dangerous?
Many companies, including banks, send security codes by phone or text when you log in to your account, reset a password, or verify a transaction. These codes are meant to prove that you are the person trying to access your account. If your calls or messages are being forwarded to a scammer, they may receive those codes instead of you.
With those codes, they may be able to:
- Reset your passwords.
- Log in to your online accounts.
- Access your bank account.
- Take over your email or social media accounts.
In other words, forwarding your calls can give scammers a way around the security features that are designed to protect you.
Warning Signs to Watch For
Most scams follow a similar pattern. Be cautious if someone:
- Contacts you unexpectedly.
- Claims there’s an urgent problem with one of your accounts.
- Pressures you to act immediately.
- Tells you to dial a code on your phone.
- Asks you not to verify the information with anyone else.
Remember, a legitimate bank or business will never ask you to dial a code to “secure” your account.
How to Protect Yourself
A few simple habits can help protect you from this scam:
- Never dial a code provided by an unexpected caller or text message.
- If someone claims to be from your bank or another company, hang up and contact the organization using a phone number you know is legitimate.
- Never share security or verification codes with anyone.
- Take a moment to slow down. Scammers often rely on panic and urgency to get people to act without thinking.
What Should You Do If You Think You Fell for the Scam?
If you think you’ve entered one of these codes, don’t panic, but act quickly.
- Contact your wireless carrier and ask them to turn off any call forwarding that has been activated.
- Change the passwords for your banking, email, and other important accounts.
- Review your accounts for any suspicious activity.
- Contact your bank immediately if you believe someone may have gained access to your account.
Bank of the James Is Here to Help
At Bank of the James, we’re committed to helping our customers recognize fraud before it happens. While scammers continue to come up with new tactics, taking a moment to verify a request before acting can make all the difference.
If you ever receive a suspicious phone call, text, or email claiming to be from Bank of the James, don’t respond right away. Instead, contact us directly using a trusted phone number. We’re always happy to help you verify whether a request is legitimate and answer any questions you may have.
