Morning Overview

The FTC says scammers are now deepfaking government agents to hit fraud victims twice

Losing money to a scam is supposed to be the worst of it, but federal regulators are warning that for a growing number of victims, the first theft is only an opening move. Criminals are now returning to people they have already fleeced, this time posing as government investigators offering to recover the stolen funds, and they are using artificial intelligence to make the impersonation frighteningly convincing. The result is a two-stage attack that preys on the very hope of getting whole again.

The anatomy of a recovery scam

The scheme is known as a recovery scam, and its logic is coldly efficient. Someone who has already lost money to fraud is contacted by a person claiming to work for a government agency, a court, or a law-enforcement task force that has supposedly seized assets and can return the victim’s money. Consumer-protection officials describe these operations as targeting people who have already been burned, and a recent alert detailed how the con artists impersonate federal agents to steal thousands more from those least able to absorb another loss. To collect the promised refund, the victim is told to pay a fee, cover a tax, or hand over banking details, and every one of those steps funnels more money to the same criminal network that took the first payment.

Why AI makes the second hit more dangerous

What separates this wave from older recovery scams is the technology behind the impersonation. Fraudsters are deploying AI-generated audio and video, including deepfakes, to manufacture the appearance of legitimate officials. Security researchers have documented cases in which scammers circulated fabricated video of a senior federal official urging people to file fraud complaints through what looked like the government’s official reporting site, lending the scheme an air of authority that a simple phone call never could. The FBI’s cyber-crime reporting arm has warned that these criminals combine identity impersonation, synthetic media, and phishing to exploit prior victims, a pattern detailed in reporting on the bureau’s alert about fake agents targeting people who were already scammed. A convincing deepfake collapses the instinctive skepticism that might otherwise protect someone, because the fake now has a face and a voice.

The sucker list economy

The reason a fresh victim receives that second call is rarely chance. Scammers buy, sell, and trade what the industry bluntly calls sucker lists, compilations of people who have previously paid a fraudster. Those lists can include names, addresses, phone numbers, the specific scam a person fell for, and the amount they lost, giving the next caller a precise script tailored to the victim’s exact experience. Someone who lost money in a fake investment can be approached by a supposed regulator investigating that very investment, complete with plausible details. Regulators have described refund and recovery scams as among the most predatory frauds precisely because they exploit both the financial wound and the personal information left behind, turning one loss into a repeatable target.

The scale of imposter fraud

Impersonation scams of every kind now rank among the costliest forms of fraud in the country. Federal data released in mid-2026 showed that people reported losing billions of dollars to imposter scams in a single year, with the government confirming that consumers reported losing $3.5 billion to imposter scams in 2025. Recovery scams sit inside that broader category, and their reliance on believable government impersonation makes them especially effective. As deepfake tools grow cheaper and more accessible, officials expect the tactic to spread, which is why the warnings have sharpened from general caution to specific alerts about AI-driven agent impersonation.

How to tell the real government from the fake

The clearest defense rests on a handful of rules that no legitimate agency violates. Government offices do not call, email, or message people out of the blue to demand payment, and they never ask for a fee, a tax, gift cards, cryptocurrency, or a wire transfer as a condition of returning stolen money. Any request to pay in order to get paid is, by itself, proof of a scam. The government maintains guidance on how to recognize the tactic, noting that officials will not demand money or threaten arrest over the phone, and urging anyone who receives such a contact to stop and verify through an official channel rather than a number or link the caller provides. Skepticism toward unsolicited video is now warranted too, since a face on a screen can be synthetic. For anyone who has already lost money, the safest assumption is that a stranger promising to recover it is the second act of the same crime, and the appropriate response is to hang up, resist the pull of hope, and report the approach to the authorities directly.

This article was produced with the assistance of AI and reviewed by the Morning Overview editorial team.



More from Morning Overview