Fraud victims who report their losses to the FBI’s Internet Crime Complaint Center are increasingly being targeted a second time, this time by criminals pretending to be the very agency meant to help them. The bureau’s most detailed public breakdown of the scheme explains how con artists have built two distinct versions of the con, one using social media impersonation and the other using AI-generated video of a senior FBI official.
How the complaint center itself becomes the lure
The scheme relies on a simple piece of psychology: once someone realizes they have been defrauded, filing a report with IC3 is often their next move, and scammers have learned to intercept that instinct. In a public service announcement the FBI issued on July 20, 2026, the bureau describes a first variant in which a person who mentions filing or planning to file an IC3 complaint is contacted on Facebook Messenger or Telegram by someone posing as an FBI agent. The impersonator offers to help “update” the complaint and sends a link to do so. That link can carry malicious code or serve as a second collection point for financial information, effectively re-victimizing someone who has already lost money once.
The deepfake version aimed at recovery victims
A more elaborate variant uses AI-generated video, commonly called deepfakes, depicting a senior FBI official encouraging viewers to file complaints through what looks like the official IC3 website. The site the video promotes is a spoofed copy, similar enough in structure and content to pass a casual look. Unlike the real intake system, the fake site’s complaint form is a single step asking only for a name, phone number, email address, scam type and estimated financial loss. After submission, it generates a reference number and tells the victim someone will follow up, a step designed to buy the scammers time and make the ruse feel procedurally real. Both variants often serve as follow-up “recovery” scams, in which the impersonators claim they can retrieve money a victim previously lost, a claim the FBI’s July 20, 2026 public service announcement says is never true when it comes from an unsolicited contact.
What the real IC3 will never do
The bureau’s advisory is explicit that this impersonation is entirely avoidable if people know a handful of facts about how the real IC3 operates. IC3 does not maintain any social media presence, does not investigate cases or recover funds through Facebook, Telegram or similar platforms, and will never initiate contact by phone, email, social media, messaging apps, online chat or public forums. Any further contact after a complaint is filed comes from FBI personnel at a local field office, not from a stranger reaching out on a chat app. The agency also stresses that it never asks for payment to recover lost funds and never refers a victim to a company that charges for recovery services.
Spotting the tells in a fabricated video
Because the more advanced version of the scam depends on synthetic video convincing enough to pass a quick glance, the FBI’s guidance leans heavily on the small errors AI generation still tends to leave behind: distorted hands or feet, oddly smooth or irregular facial features, mismatched shadows, faint watermarks, lag in voice timing, and movements that read as slightly unnatural. The bureau also recommends a behavioral check as much as a visual one — treating any video that provokes a strong emotional reaction, whether fear, anger or urgency, as a signal to slow down and verify the claim through a known official channel before acting on it.
Verifying the address is the simplest defense
Much of the bureau’s advice reduces to a single habit: typing www.ic3.gov directly into a browser rather than clicking a link or trusting a search-engine result, since sponsored search listings are a common vector for scammers buying ad placement above the legitimate site. Confirming that a URL ends in “.gov” and matches ic3.gov exactly catches most spoofed pages before any information changes hands. The FBI also warns against clicking any link in a message whose web address differs even slightly from the real site, since minor character substitutions are the most common trick spoofed domains use.
Who to contact if it already happened
Anyone who believes they have been targeted by an IC3 impersonator is directed to file a report at the legitimate ic3.gov, including identifying details about the impersonator, the platforms used to make contact, and any financial transaction information such as dates, payment types, account numbers, and the receiving institution or cryptocurrency address involved. Victims 60 or older can also reach the Justice Department’s Elder Justice Hotline for help filing a complaint. The bureau notes this advisory updates an earlier one from April 2025, underscoring that the underlying scheme, tricking fraud victims into a second loss by posing as the agency meant to help them, has persisted and evolved rather than faded.
This article was produced with the assistance of AI and reviewed by an editor.
More from Morning Overview
- An 80-foot stepped pyramid off Japan may predate every civilization we can name
- Early Tesla Model S owners are hitting battery and screen failures no one warned them about
- Dietary supplements now rank among the leading causes of drug-linked liver failure
- 11 engines built to run well past 200,000 miles
