The FBI says scammers are now impersonating its own fraud-report site

The government portal where Americans go to report online fraud has itself become bait for a new round of scams. The FBI has warned that criminals are impersonating the Internet Crime Complaint Center, known as the IC3, along with FBI personnel, to prey on people who have already lost money and are looking for a way to get it back.

The tactic is a form of double-dipping. Rather than searching for fresh targets, the operators go after victims who have been defrauded once, offering the false hope of recovering stolen funds through what looks like an official channel. That angle makes the impersonation especially cruel and especially effective, because the people most likely to click are the ones already primed to trust a message that promises restitution.

How the IC3 impersonation scheme works

According to the bureau’s public service announcement, released on July 20, 2026, the campaign combines several methods to reach and deceive prior fraud victims. Scammers post AI-generated videos on social media featuring deepfakes of senior FBI officials, urging viewers to report crimes on what appears to be the IC3 website. They also impersonate agents directly on platforms such as Facebook Messenger and Telegram, steering people toward malicious links dressed up as complaint-update portals.

Once a target follows the link, they land on a spoofed site built to mimic the real ic3.gov. The counterfeit portal strips the genuine complaint process down to a single, simplified form that asks for a name, phone number, email address, the type of scam, and an estimated financial loss. After the form is submitted, the victim receives a fake reference number and is told authorities will be in touch. In reality, the harvested details feed further exploitation, including identity theft and additional fraud.

Deepfakes and the manufactured air of authority

The use of synthetic video marks an escalation over older recovery scams that relied on plain email or a phone call. By fabricating clips of recognizable officials, the operators borrow the credibility of the institution they are impersonating, giving a con the visual polish of a legitimate announcement. Security analysts tracking the campaign have described the deepfake videos of IC3 leadership as a deliberate attempt to make the fake reporting site feel authoritative before a victim ever reaches the form.

That manufactured authority is the engine of the scheme. A grainy or convincing video of a senior official telling viewers to file a report lowers the natural skepticism a person might otherwise bring to an unsolicited message. The form that follows asks only for information most people would readily hand to a real law enforcement portal, which is precisely why the simplified design is dangerous rather than reassuring.

The one detail the FBI wants people to remember

Amid the technical sophistication, the bureau’s core guidance is strikingly simple. The FBI has clarified that the IC3 does not maintain a social media presence and does not contact individuals directly through messaging platforms, phone calls, or email to recover funds. Any such communication, the agency says, should be treated as fraudulent on its face. Coverage of the advisory has stressed that the fake agents specifically target people who already got scammed, which is why the recovery pitch is the tell.

That single rule cuts through most versions of the scam. A genuine complaint to the IC3 is initiated by the person filing it, at the official website, and does not generate follow-up recovery offers over Telegram or Messenger. When an inbound message, video, or link claims to be the IC3 reaching out to help retrieve lost money, the mismatch with how the real center operates is the clearest sign of fraud.

Why recovery scams keep finding victims

Recovery schemes persist because they exploit a specific and painful moment. People who have lost savings to an investment con, a romance scam, or a business-email compromise are often desperate to recover something, and that desperation is a known vulnerability that fraud operators trade on. Lists of prior victims circulate among criminals, and a second approach framed as official help can feel like a lifeline rather than a trap.

The safest posture is to route any fraud reporting through the authentic channel and to verify the web address rather than trusting a link delivered by message or embedded in a video. The real complaint center lives at ic3.gov, and anyone who suspects they have engaged with a spoofed portal is encouraged to report that contact through the legitimate site. Treating unsolicited recovery offers as scams by default, regardless of how official the messenger appears, is the practical defense the advisory points toward.

The broader lesson extends past this one campaign. As synthetic media becomes cheaper to produce, impersonation of trusted institutions is likely to grow more convincing, and the burden of verification shifts further onto the individual. The FBI’s warning is narrow in its specifics but wide in its implication: even the official destination for reporting fraud can be faked, and the surest guard is knowing how the real agency does, and does not, reach out.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview