Consumers who receive a text message from someone claiming to work at the Federal Trade Commission, complete with a photo of an official-looking employee badge, are being targeted by a scam the agency itself flagged in June 2026. The FTC confirmed that fraudsters are now sending images of fabricated government IDs through text and WhatsApp to convince people they are dealing with a real federal employee. Combined reported losses from government and business impersonation schemes have topped $1.1 billion, and the median loss per victim of FTC-specific impersonation has been climbing, even as the agency works to enforce a rule designed to stop exactly this kind of fraud.
How fake badge photos exploit trust in government credentials
The core of the scheme is simple: a scammer contacts someone by text or messaging app, identifies themselves as an FTC “agent,” and then sends a photograph of a fake employee ID card to preempt skepticism. In its June alert, the agency stressed that legitimate staff will not text consumers or use WhatsApp to initiate contact, and they will not send pictures of badges or IDs as proof. No real FTC employee uses the title “agent,” and the agency does not resolve investigations, collect payments, or deliver official warnings through these messaging platforms.
This tactic is an evolution of an earlier playbook. In a pattern the FTC documented separately, scammers were calling people and reciting fake badge numbers to sound authoritative, often after routing victims through sham interactions with what appeared to be a bank, tech support line, or Amazon customer service. The shift from voice calls to text-based messaging with visual “proof” reflects a broader change in how these schemes reach people. FTC data show that reports of scams starting via phone calls fell between 2020 and 2023, while reports of scams starting via texts or emails increased over the same period, according to an FTC analysis of impersonation trends.
The move to text channels makes sense from the scammer’s perspective. Texts are cheaper and faster to send at scale than live phone calls, and they can be automated in bulk. A photo of a badge gives the target something tangible to examine, creating a false sense of verification that a spoken badge number cannot match. Scammers can also reuse the same doctored image across thousands of messages, swapping in different names or titles with basic editing tools.
Behind the badge photos, the pressure tactics are familiar. The FTC’s Office of Inspector General has noted that impostors rely on caller-ID spoofing, urgency, and threats, and that they often demand payment through cryptocurrency, wire transfers, payment apps, or gift cards. In these text-based scams, the fake badge is typically followed by a claim that the recipient is under investigation, that their Social Security number has been compromised, or that they are owed a refund that must be “verified” before release. The agency has repeatedly stated it will never demand money, threaten arrest or deportation, or direct anyone to a Bitcoin ATM or to buy gold bars.
Enforcement actions and the $1.1 billion loss figure
The FTC’s Impersonation Rule, which took effect in April 2024, was designed to give the agency stronger tools to pursue both government and business impostors. When the rule went into effect, the FTC reported that combined losses to these scams had surpassed $1.1 billion, based on consumer complaints. The same data spotlight underscored the channel shift: more people said the initial contact came by text or email, and fewer reported that scams began with a traditional phone call.
The first enforcement action under the new rule targeted a student loan debt relief operation that took millions from borrowers by posing as if it were connected to the U.S. Department of Education. According to the FTC, the scheme, which had been running since at least June 2021, used official-sounding names and promises of loan forgiveness to collect upfront fees and sensitive personal information. The case demonstrated that the Impersonation Rule could be used to shut down operations that trade on the credibility of real government agencies.
But that first case involved a structured business operation, not the kind of decentralized text-message barrage now circulating with fake FTC badges. That gap matters. The rule exists, and the agency has begun to wield it, yet the pace of formal enforcement cannot match how quickly low-cost, copy-and-paste scams can proliferate across messaging apps. Each enforcement case requires investigation, evidence, and often coordination with other authorities, while the scammers can abandon phone numbers and accounts as soon as they draw scrutiny.
Complicating matters further, the FTC has warned that impostors sometimes use the names of real employees to bolster their claims. A text might display a badge image with a genuine-sounding name and a reference to a real division within the agency, making it even harder for recipients to distinguish between fraud and legitimate contact. The agency’s reporting shows that while many people now recognize the warning signs and hang up or ignore messages, those who do engage with the impostors are losing more money per incident. Rising median losses suggest that once a victim is drawn into the conversation, the scammers are increasingly effective at extracting large payments or sensitive information.
Gaps in data and what consumers should do first
Several questions remain open about this latest twist on government impersonation. No publicly available FTC dataset isolates reports specifically involving texted photo IDs as distinct from other impersonation methods, such as phone calls, emails, or social media messages. The Consumer Sentinel Network, which collects millions of reports each year from consumers and law enforcement partners, provides aggregate figures on fraud and identity theft but does not break down losses by the specific visual artifacts scammers use. Because those reports are unverified and not based on a representative survey, they are also likely to understate the true scale of the problem, especially for fast-evolving schemes like fake badge photos.
That lack of granular data makes it harder to quantify exactly how widespread the badge-image tactic has become, or to measure how effective specific public warnings are in reducing harm. It also limits researchers’ ability to compare this method with other impersonation techniques, such as spoofed email domains or deepfake audio. For now, the most concrete information comes from the FTC’s alerts, enforcement announcements, and the patterns visible in broader impersonation statistics.
In the absence of detailed metrics, the most important steps are practical ones that individual consumers can take when a suspicious message arrives. If someone texts claiming to be from the FTC-or any government agency-and sends a photo of a badge, the safest assumption is that it is a scam. Recipients should not click links, call phone numbers, or respond to the message. Instead, they can independently look up contact information on the official ftc.gov website and reach out through those channels if they have concerns about identity theft, fraud, or an ongoing case.
Consumers who receive these messages are also encouraged to report them to the FTC, either at ReportFraud.ftc.gov or through the agency’s main website. Including screenshots of the text and the fake badge image can help investigators spot patterns, such as recurring phone numbers, phrasing, or graphic designs, even if the exact scope of the problem cannot yet be quantified. Reports can be filed even when no money has been lost; early warnings about new tactics can help the agency tailor future alerts and enforcement priorities.
Ultimately, the emergence of fake badge photos underscores a familiar lesson: visual cues alone are not reliable proof of government authority. Real federal agencies rely on secure channels, written notices, and verifiable contact information, not surprise texts demanding urgent action. Until enforcement and data collection catch up with the latest wave of impersonation tactics, skepticism-and a refusal to engage over text-remains the most reliable defense.
More from Morning Overview
*This article was researched with the help of AI, with human editors creating the final content.
