The FTC warns con artists are now posing as FTC agents to hit past victims again

Losing money to a scam can place a victim on another criminal’s target list. The second approach often sounds reassuring: a supposed government specialist claims to know about the earlier loss and promises to recover it. The Federal Trade Commission says impostors are now using its own name and fake employee credentials to make that recovery pitch believable.

The second scam starts with knowledge of the first

Criminal groups trade information about people who previously paid, responded or disclosed personal data. A caller who knows the amount lost or the type of fraud can sound like an investigator with access to a case file.

In a June 2026 consumer alert, the FTC described unexpected messages from people claiming to be agency “agents.” The impersonators offer to recover losses, then send pictures of fake identification and badges to build trust.

The personalization is evidence of data sharing among scammers, not proof of government access. A real agency does not need a victim to pay a fee, move savings or surrender banking credentials before it can investigate a complaint.

Fake identification is designed to end the verification process

A photograph of a badge can look official while being created from public logos and an invented name. Caller ID, email addresses and websites can also be spoofed or built to resemble legitimate government channels.

The FTC says its employees will not contact people by text or messaging apps to send photo identification. They will not ask for money, order a transfer to a designated account, or request financial information in exchange for recovering a prior loss.

Recovery schemes depend on hope and urgency

The FTC’s broader guide to refund and recovery scams explains that operators may pose as consumer advocates, law firms, government agencies or even the company involved in the original fraud. The offer normally requires an upfront charge or access to accounts.

Legitimate refunds generally do not require a recipient to pay another person first. Court-appointed administrators and government agencies provide independently verifiable notices and do not demand cryptocurrency, gift cards or cash.

Independent contact breaks the impersonator’s control

An unexpected FTC message should be verified through contact information obtained from FTC.gov, not through a number or link in the message. Ending the conversation prevents the caller from guiding every step of the supposed check.

No image, badge number or supervisor transferred onto the call substitutes for independent contact. A second person can also review the message without the emotional pressure created by the promise of getting money back.

Quick action can limit a second loss

If money or account information has already been sent, the bank, card issuer, wire service or payment app should be contacted immediately. Some transactions can be stopped or reversed when reported quickly. Passwords should be changed, and exposed accounts may need new numbers or additional monitoring.

Reports can be filed through the FTC’s official ReportFraud portal. Messages, phone numbers, receipts, wallet addresses and screenshots should be preserved because details that look minor may connect the approach to other victims.

A previous victim may also need to consider what information the first scam exposed. Credit reports can be reviewed for unfamiliar accounts, fraud alerts or a credit freeze may be appropriate, and reused passwords should be changed. These steps address identity theft separately from the immediate payment demand.

Families can reduce shame by treating a recovery approach as a predictable second stage rather than evidence that someone was careless twice. Criminals deliberately use the earlier loss to create credibility and isolation. A calm outside review makes it easier to reject the offer before hope becomes another transaction.

Real restitution can occur through courts, bankruptcy proceedings or government refund programs, but those processes leave a public trail. Case numbers, official domains and administrator information can be verified independently. A surprise text with a badge photograph is not that trail.

The new warning exploits an especially cruel moment: the point when a victim is looking for help. The safest rule is simple. A stranger who promises government-backed recovery while asking for money or financial access is not returning the first loss; the stranger is attempting to create a second one.

A legitimate recovery notice should identify the case, explain eligibility and provide a route for verifying the administrator without relying on the incoming message. It may request information needed to deliver payment, but it should not convert the recipient into a payer. Demands for taxes, release fees or account-protection transfers before a refund are signs that the promised recovery is fictional.

Repeated contacts should be expected after any response. Blocking one number may not end the campaign because identities and channels change cheaply. Preserving evidence before blocking, tightening account security and alerting trusted contacts creates a more durable barrier than debating each new caller about the badge or story being presented.

Assistance should focus on control rather than blame. Restoring account access, documenting losses and creating a verification routine can reduce the isolation that recovery scammers exploit. Shame, by contrast, can keep later approaches hidden until another payment has already moved.

This article was produced with the assistance of AI and reviewed by Morning Overview editors prior to publication.

More from Morning Overview