How Scammers Impersonate the FBI—and What to Do If You Get Contacted
July 21, 2026

How Scammers Impersonate the FBI—and What to Do If You Get Contacted
The FBI recently warned that scammers are sending direct messages on social media, pretending to be FBI agents. They're using fake accounts that look official—sometimes mimicking the real FBI's IC3 (Internet Crime Complaint Center) accounts. Their goal: to trick people who've already been scammed into sending more money or handing over personal information.
This is a second wave of fraud. Here's how it works and how to protect yourself.
The Setup: How the Impersonation Works
A scammer creates a fake social media account and makes it look like it belongs to the FBI or the IC3. They use official-sounding names, FBI logos or seals, and sometimes copy language from real government accounts. When they contact you, it feels legitimate.
The timing matters. These fraudsters often target people who've already reported a scam to the real IC3 or FBI. They've found your name and contact information somewhere in that complaint process—or they're simply guessing that anyone they reach might have been victimized before. People who've been scammed once are often more trusting of authority figures the second time, especially if someone claims to be investigating their case.
What They Ask For
The fake agent will tell you they're investigating your case or recovering your money. To "help you," they'll ask you to:
- Send money to cover recovery costs or fees
- Provide your bank account details, passwords, or Social Security number
- Share cryptocurrency information or wallet addresses
- Click a link to "verify your account" or "secure your information"
None of this is real. The FBI and IC3 never ask victims to pay money to recover funds. They never ask for passwords or sensitive account information via direct message. They don't send you links to click.
How to Spot the Fake
A real government contact will have these characteristics:
- They reach you through official channels: a phone call from a verified government number, a letter in the mail, or an email to your registered account through a government website.
- They never ask you to click links or go to external websites to verify information.
- They don't promise fast money recovery or guaranteed results.
- They ask you to verify their identity independently. If an "agent" claims to be from the FBI, you should hang up or close the message and call the FBI directly using the phone number on the official FBI website.
A scam impersonation will typically:
- Arrive as a direct message on social media (Instagram, Facebook, X, TikTok) or through email.
- Use urgent language: "Act now," "Your case is time-sensitive," "We found your money."
- Pressure you to communicate only through that channel.
- Ask for money, passwords, or other sensitive information.
- Offer a link to click or a file to download.
What to Do If You're Contacted
If you receive a message claiming to be from the FBI or any law enforcement agency:
- Do not respond to the message.
- Do not click any links or download any files.
- Do not send any money or personal information.
- Screenshot the message if you can safely do so.
- Report it to the real IC3 at ic3.gov. If it's on social media, also report it to that platform.
- If you've already been scammed and filed a report, contact your local FBI field office directly using the number on the FBI website. Tell them you received a suspicious message and ask them to confirm whether they're investigating your case.
The Bottom Line
Scammers are counting on you to trust official-looking accounts and urgent messages. They're also counting on the fact that you may be frustrated after being scammed once. Don't let that frustration override your judgment.
The real FBI will never cold-contact you with promises of money recovery. If you've filed a legitimate complaint, they'll reach out through official channels—and you can always verify by calling them directly yourself. Verification is your strongest defense here. You're in control of that call, not them.
You've already learned a hard lesson once. This time, you'll recognize the setup before it gets further.
Sources
Don't trust that "FBI agent" in your DMs Malwarebytes Labs
The Odyssey piracy scams appear within hours of the movie's release Malwarebytes Labs
Founders of Celsius Network Ordered to Pay $16.5 Million to Resolve FTC Charges FTC Consumer Protection
Suno - 55,282,226 breached accounts Have I Been Pwned
Enjoyed this? Get the next issue free.