FBI warns scammers are impersonating IC3 to target fraud victims

The FBI’s Internet Crime Complaint Center has updated a warning about scammers posing as the bureau online to target people who have already been hit by cybercrime. The scheme matters for security teams, platforms and fraud vendors because it combines social media impersonation, spoofed reporting portals and AI-generated video to make recovery scams look official.

According to IC3, fraudsters are using two related tactics. In one, scammers set up fake social media accounts or pages that claim to represent FBI personnel or IC3. They also enter online groups for fraud victims or contact victims directly while presenting themselves as federal officials or complaint center staff.

IC3 said some victims are contacted after they have identified an attempted scam and said they plan to report it to the FBI or file an IC3 complaint. In those cases, the impersonator may send them to a fake IC3 status page or keep the conversation going through messaging apps.

The second tactic relies on AI-generated videos posted to social media. IC3 said scammers are creating videos that depict senior FBI officials and direct viewers to a counterfeit IC3 website where they are told to report cybercrimes. The information submitted there is then used to contact victims again for additional fraud, according to the center. IC3 also said AI-generated depictions of public figures are being used to give the schemes a more credible appearance.

“Some individuals received an email or a phone call, while others were approached, or observed an advertisement via social media or forums,” IC3 said. “Almost all complainants indicated the scammers claimed to have recovered the victim's lost funds or offered to assist in recovering funds.”

The bureau’s main point is operationally simple: IC3 says it has no social media presence, does not investigate crimes through social media and does not offer to recover stolen funds through online messages. Any profile or page claiming to be IC3, or claiming it can recover money on IC3’s behalf, is fraudulent, the center said.

“IC3 will never directly communicate with individuals via phone, email, social media, phone apps, online chat, or public forums,” the center said. It added that if a person submits a report through the actual IC3 website, any follow-up will come from an FBI employee at a local field office or another law enforcement official.

IC3 did not disclose how many complaints are tied to the impersonation schemes or how much money victims have lost to them. It also did not identify specific social networks, messaging apps or spoofed domains involved.

The warning reflects a familiar pattern in online fraud: once a victim has disclosed a loss publicly, or shown intent to seek help, that person becomes a lead for a second scam. Recovery fraud has long depended on that dynamic. The newer piece is the use of AI-generated video and fake official web pages to reduce skepticism at the point where victims are looking for law enforcement or financial help.

For users, the guidance is narrow but clear. Cybercrime reports should be filed through the real IC3 website, not through social media links, ads, messaging apps or unsolicited outreach. IC3 also advised victims not to post publicly about being scammed, because doing so can draw attention from fraudsters looking for people who may be vulnerable to follow-up schemes.

This story draws on original reporting from The Register.