An urgent debt caller asks for your banking password to verify hardship

The request goes beyond a payment discussion

An unexpected caller says payment is urgent but offers to check whether you qualify for more time if you provide your banking password or a security code. Do not share credentials or approve a sign-in you did not initiate. End the credential request and verify the contact independently. A real debt can be used as context for a separate attempt to obtain account access.

Preserve the details without continuing the access attempt

Keep the message, claimed organisation, telephone number and what was requested. Do not click a supplied login link or install software to let the caller inspect your finances. Avoid sending screenshots containing codes. If genuine collection correspondence also exists, retain it separately so advice about the debt can continue without trusting the unexpected contact.

Use independent verification

Scamwatch warns against sharing passwords or one-time codes with unexpected contacts, even when they claim to represent a trusted organisation. Contact the creditor or agency through details sourced independently from an established record or official channel. Do not verify the caller by calling only the number they supplied or by replying to the same message.

Source: Scamwatch: Phishing scams

Consider a hypothetical hardship pretext

Imagine a caller knows an overdue invoice amount and says a bank code is needed to pause legal action. Knowledge of the account does not prove authority or make the request safe. Verify the actual creditor's position separately. The example does not establish that the underlying debt is false or that genuine formal documents can be ignored.

Share legitimate evidence through an agreed process

If a verified creditor needs financial information for a proposed arrangement, ask what documents are relevant and how they should be supplied securely. Discuss sensitive disclosures with your adviser. A bank statement or supported budget is different from giving someone control of your account; do not confuse evidence of financial position with permission to log in as you.

Act promptly if access was exposed

Contact your bank immediately through a trusted channel if credentials, codes or account access may have been compromised, and follow its instructions. Preserve evidence and seek appropriate assistance. Continue handling the actual debt with verified contacts and legal advice where needed. The practical goal is to prevent an urgent payment conversation from becoming unauthorised access to the business's money.