"The FTC will use every tool available to combat one of the most pernicious forms of fraud—government and business impersonation—and to protect the integrity of the digital economy," said Christopher Mufarrige, director of the FTC's Bureau of Consumer Protection.
Scale and scope: $3.5 billion lost to imposter scams in 2025
The Federal Trade Commission warned that Americans lost $3.5 billion to imposter scams in 2025, a figure the agency says nearly triples losses reported in 2020. Imposter scams were the most reported fraud category last year, accounting for nearly one in three fraud reports filed with the FTC. Across all categories, reported fraud losses surged to about $16 billion in 2025—the highest on record and roughly 25% above the prior year.
The wider law-enforcement picture cited in the same reporting shows cyber-enabled crime remaining enormous: the FBI warned in its 2025 Internet Crime Report that U.S. victims lost almost $21 billion to cyber-enabled crimes throughout last year, underscoring that impersonation is a substantial portion of a larger fraud landscape.
Social media as the primary attack vector
Social platforms drove an outsized share of the damage. The FTC traced more than $2.1 billion in 2025 losses to social media—an eightfold increase since 2020—and found that nearly one in three Americans who lost money in imposter scams were first contacted through social media. Facebook alone accounted for losses that exceeded those from text and email combined; WhatsApp and Instagram ranked second and third as initial contact channels.
The FTC said fraudsters reach victims through text messages, phone calls, emails, social media, and search engine results. The costliest schemes typically involve a fake bank security alert that prompts targets to transfer funds to "protect" their accounts.
FTC enforcement under the Impersonation Rule
The FTC's Impersonation Rule took effect in April 2024. Since then the agency reports it has brought a dozen enforcement actions, secured more than $70 million in consumer redress, and halted some imposter schemes. Law enforcement actions announced last year under the rule targeted a range of alleged schemes: MediaAlpha (government imposter scheme); American Tax Service (IRS imposter scheme); Blackstone Legal (phantom debt business imposter scheme); Click Profit (business imposter money-making scam); and Accelerated Debt Settlement (government and business imposter scheme).
In April 2026 the FTC filed a complaint against Innovative Partners, alleging the company impersonated the government and insurance carriers to sell fraudulent health plans. The agency also highlighted earlier warnings: in March 2024 it had warned that scammers were impersonating FTC employees to pressure Americans via phone calls, email, or text messages into wiring or transferring money.
What this means for consumers, security teams, and regulators
- Consumers and the general public: With nearly one in three victims first contacted on social media and bank-security-alert scams among the costliest, the FTC’s figures place social platforms and fake account alerts at the center of recent losses. Facebook, WhatsApp, and Instagram were singled out as primary channels.
- Technologists and security teams: The reporting highlights a detection gap — the source notes that security teams log 54% of successful attacks and alert on just 14% — leaving many intrusions to move through environments unseen. Social-media vectors that result in direct financial transfer present a distinct monitoring and mitigation challenge compared with email- or phone-based scams.
- Policymakers and regulators: The Impersonation Rule has been the vehicle for dozen-plus enforcement actions and more than $70 million in redress. The FTC’s stated intention to "use every tool available" signals sustained regulatory focus on schemes that impersonate government and business actors, and on actors alleged to sell fraudulent plans or services.
The integrity question for the digital economy
The numerical record is stark: $3.5 billion lost to imposter scams in 2025, social-platform losses of more than $2.1 billion, nearly $1 billion lost to business impersonators and roughly $920 million to government impersonators. Combined with the FTC’s enforcement tally and the FBI’s broader cyber-loss estimate, the data frame impersonation as both a major consumer-harm vector and a priority for law enforcement and regulators.
The FTC has documented the routes—texts, calls, email, search, and social postings—and named several defendants and alleged schemes. The agency’s promise to deploy its tools, plus the Impersonation Rule outcomes to date, makes enforcement the clearest immediate lever shown in the record. Whether enforcement and industry responses will stem the rapid rise in social-media-driven losses is the practical question the facts leave in plain view.
