Phone scamStill active

Calls from Butterfield Bank's real number about "suspicious international payments" ask you to install AnyDesk

Fake Butterfield fraud investigators spoof 441-295-1111, then pass you to "tech support" who has you install AnyDesk.

Is it a scam?
Yes, it's a scam. Butterfield Bank didn't call you, even though caller ID showed its real number, and a bank never asks you to install AnyDesk.
Type
Phone scam
First reported
October 20, 2026
Status
Still active
Who it targets
Businesses and corporate banking customers in Bermuda, and Butterfield customers in general
Tools it uses
AnyDesk, Butterfield Bank

If someone called saying they're from Butterfield Bank's fraud team, warned about suspicious international payments, and then asked you to install AnyDesk, it's a scam. The Bermuda Police Service warned about these calls on October 23, 2026. Hang up and call Butterfield yourself using a number you already trust.

What does the fake Butterfield call sound like?

According to police, the calls ran on October 20 and 21, 2026, and went mainly after businesses and corporate banking customers in Bermuda. The caller ID showed Butterfield's real main number, 441-295-1111, because the scammers faked (spoofed) it. That's why the calls looked genuine.

The caller said suspicious international payment activity had been found on your account. Police say they used real-looking account details and made-up fraud reference numbers to sound believable. Then you were passed to "technical support", who asked you to install AnyDesk from a website.

How the scam plays out

AnyDesk is a real program that lets someone see and control a computer from far away. Police say victims were sent to fake websites to download it, including butterfieldcontact.web.app and butterfieldhelpdesk.web.app. Both have been taken down, but don't visit them if you see them again.

Once connected, the scammers tried to get information or move money. Police say some victims were told to send funds to a so-called "safe account". There's no such thing. A real bank never asks you to move your money to keep it safe.

Is a call from Butterfield's own number safe?

Not on its own. Caller ID can be faked, so a call can show your bank's real number and still be a scammer. If anyone calling from "your bank" asks you to install a program, read out a code or move money, hang up. Then call the bank on a number from its website, your card or a statement, from a different phone if you can.

I got the call but didn't install anything

You're fine. If you're worried about your account, call Butterfield yourself on a number you know is real. Tell staff at work about the call, and agree that any unusual payment, especially an international transfer, gets checked by a second person first.

I installed AnyDesk or sent money. What now?

Act now, even if nothing looks wrong yet.

  1. Disconnect the computer from the internet (unplug the cable or turn off Wi-Fi). Don't use it for online banking until it has been checked.
  2. Call your bank from a different phone or device, using a number you trust. Tell them someone may have had access to your computer, and about any payments.
  3. Report it to the Bermuda Police Service.
  4. Change your email password from another device, then your banking passwords.
  5. Uninstall AnyDesk (Settings, then Apps, then Installed apps on Windows 11, or "Apps & features" on Windows 10).

Our two-minute checklist walks through each step, and what to do after a remote access scam covers the days after.

How to spot it next time

Your bank doesn't need AnyDesk, TeamViewer or any other remote access program to protect your account. Treat any call that asks for one as a scam, whatever the caller ID says. Our guide on why a bank would never ask you to install AnyDesk explains the usual script.

If your business uses Windows 11 PCs, Xcelcor Guardian can add one more check. It holds every new remote connection, including AnyDesk, until the account holder approves it by email or on xcelcor.com. It won't stop the call, but it can stop a stranger connecting just because someone on the phone asked.

Phone numbers, messages and files linked to this scam

Web addresses are written with [.] so they can’t be clicked by mistake. If something you received matches, it’s this scam.

Phone numbers

  • 441-295-1111Butterfield's real main switchboard, faked (spoofed) on caller ID by the scammers. Don't trust the call just because this number shows.Also written +1 (441) 295-1111 · 1-441-295-1111 · (441) 295-1111 · 4412951111
  • 295-1111The same Butterfield number as it shows on local caller ID

What the message or pop-up says

suspicious international payment activity had been detected on the victims' accounts

How police described what the callers said

Websites

  • butterfieldcontact[.]web[.]appFake site used to download AnyDesk, now taken down (Bermuda Police Service, Oct 2026)
  • butterfieldhelpdesk[.]web[.]appFake site used to download AnyDesk, now taken down (Bermuda Police Service, Oct 2026)

Questions people ask

The call came from Butterfield's real number. Isn't it genuine?

Not necessarily. Scammers can fake caller ID so a call shows a bank's real number. Hang up and call Butterfield yourself on a number from its website or your card.

Would Butterfield ask me to install AnyDesk?

No. A bank doesn't need to see or control your computer to protect your account. Anyone who asks you to install AnyDesk or a similar program is a scammer.

They told me to move money to a safe account. Should I?

No. There's no such thing as a bank "safe account" for protecting your money. If you already sent money, call your bank right away from a different phone.

I installed AnyDesk. What now?

Disconnect the computer from the internet, call your bank from another device, report it to the Bermuda Police Service, and follow our checklist.

Sources

Get Scam Watch by email One short email on Fridays, only when new scams are going around.

Send me the Scam Watch email about new scams going around. I can unsubscribe at any time. We’ll email you to confirm first.

Last updated