“IC3 will never directly communicate with individuals via phone, email, social media, phone apps, online chat, or public forums,” the Internet Crime Complaint Center (IC3) warned, bluntly closing the door on a common prey tactic now resurfacing on social platforms.
IC3’s communication rule and the bureau’s clarification
The IC3 updated an earlier warning on Monday about a renewed impersonation campaign that uses social media and other online venues to target people who report cybercrime. The center emphasized two core facts: it has no social media presence of any kind, and it does not investigate crimes or offer to recover lost funds through social media. The IC3’s guidance is categorical: any profiles or pages claiming to represent IC3 or offering to recover money are fraudulent and are “actively attempting to steal your personal or financial information.”
Scheme 1: Fraudulent social profiles, group infiltration and direct contact
According to the IC3, one widely used playbook involves creating fake social media profiles and pages that impersonate FBI personnel or the IC3 itself. Scammers may infiltrate groups for fraud victims or contact victims directly while claiming to represent either the FBI or IC3. In some reported cases, the impersonator approaches someone who has already been targeted by a different scammer and says they intend to report the incident to the FBI or file an IC3 complaint.
The FBI said the impersonator then often directs the victim to a fake IC3 update page or continues the conversation through messaging apps—channels the IC3 says it never uses to contact complainants. IC3 investigators noted that “almost all complainants indicated the scammers claimed to have recovered the victim's lost funds or offered to assist in recovering funds,” a claim that forms the hook for follow‑on fraud.
Scheme 2: AI-generated videos of senior officials and spoofed IC3 websites
In a second variant, fraudsters are using AI-generated videos that depict senior FBI officials and posting those clips on social media. The videos direct users to a spoofed IC3 website to “report” a cybercrime. The scammers then collect whatever personal and incident information victims submit and use it to contact them again—this time for further deception or theft. The IC3 specifically flagged the use of AI-generated depictions of public figures as a technique that makes these setups appear more legitimate to potential victims.
How victims are approached and why they’re re‑targeted
- Delivery channels: “Some individuals received an email or a phone call, while others were approached, or observed an advertisement via social media or forums,” the IC3 said, illustrating the variety of initial touchpoints used by scammers.
- Common lure: Scammers nearly always promise that lost funds have been recovered or offer to help recover them, a line meant to convert already distressed people into further targets.
- Follow‑through: After convincing a victim to engage, fraudsters funnel information through fake pages, messaging apps, or spoofed complaint portals—mechanisms the IC3 says it does not employ.
What this means for end users, local law enforcement, and technologists
- End users and the general public: The IC3’s direct advice is stark — do not trust social media profiles or videos that claim to be IC3 or that offer fund recovery, and avoid posting your victimization publicly on social media because it can invite further contact from bad actors.
- Local law enforcement and FBI field offices: The IC3 clarified that any legitimate follow‑up after a complaint filed through the actual IC3 website will be made by an FBI employee from a local field office or by other law enforcement officials—not by social media outreach or unsolicited messages.
- Technologists and platform operators: The use of AI-generated videos and spoofed complaint sites highlights the need to detect and disrupt cloned pages, synthetic media, and fraudulent advertisement funnels that direct victims to credential- and data-harvesting pages.
The record here is plain and practical: impersonation schemes are evolving to include both social engineering via faux human profiles and a newer layer of synthetic media designed to confer apparent authority. The IC3’s position is equally unambiguous — it will not solicit victims or promise fund recovery through informal channels. For anyone who has been targeted, the clearest immediate step the IC3 itself offers is to avoid engaging through social media, and to expect legitimate contact only if and when they report an incident via the IC3 website and are contacted by law enforcement from a local field office.
Original story: https://www.theregister.com/security/2026/07/20/scammers-impersonate-fbi-on-social-media-prey-on-crime-victims/5275224
