Scammers have found a new mark. They target people already burned by online fraud. Then they pose as FBI agents ready to help recover the losses. The tactic isn’t new. But its scale and sophistication have exploded.
Direct messages arrive on Facebook or Instagram. They promise assistance filing a report with the Internet Crime Complaint Center. Some lure victims to Telegram for private talks. Others direct them to spoofed websites that look official. The goal stays the same. Extract more money or personal data from desperate targets. And the numbers show it’s working.
The Federal Trade Commission reported that social media became the costliest channel for fraud in 2025. Consumers lost $2.1 billion through it. That’s an eightfold jump from 2020. Nearly 30% of those who reported any scam loss said it started on platforms like Facebook. FTC press release.
Investment fraud drove more than half those social media losses. Romance scams followed close behind. Nearly 60% of romance victims traced their first contact to a social app. Scammers study profiles. They build trust. Then they pivot to fake opportunities. But government impersonation adds a cruel twist. It strikes after the first scam.
The FBI’s Internet Crime Complaint Center issued an updated warning on July 20, 2026. It details two primary schemes. In one, fraudsters create fake profiles and pages on social networks. They impersonate FBI personnel. Victims receive messages on Facebook Messenger. The conversation shifts to Telegram. Links lead to counterfeit IC3 sites designed to harvest information. IC3 PSA.
The second scheme leans on artificial intelligence. Scammers post AI-generated videos on social media. These clips feature deepfakes of senior FBI officials. The figures urge viewers to report crimes on what appears to be the IC3 website. The site is fake. It collects names, phone numbers, emails, and loss details. A reference number follows. Then the pressure builds.
But wait. The real IC3 operates differently. It maintains no social media accounts. It never contacts individuals directly by phone, email, or messaging apps to discuss complaints or offer recovery. Any follow-up comes from local FBI field offices or other verified law enforcement. The agency states this clearly. “The IC3 does not work with any non-law enforcement entity, such as law firms or crypto services, to recuperate lost funds or investigate cases. The IC3 will never directly contact you for information or money.”
That quote comes from the IC3 homepage and is highlighted in coverage by Malwarebytes. The July 21, 2026, article examines real examples. One Facebook account posed as “Ic3 Scam Recovery Inc.” It posted testimonials that looked fabricated. The text promised “experienced recovery team,” “professional case assessment,” and “secure and confidential support.” Victims who had posted about their losses elsewhere received direct messages. The scammers monitored public complaints. They pounced. Malwarebytes article.
AI tools have changed the threat calculus.
Voice cloning, deepfake video, and generated scripts make interactions feel authentic. A 2025 FBI Internet Crime Report cited in multiple outlets tallied nearly $900 million in losses to AI-powered scams. Government impersonation complaints jumped sharply. The IC3 received over 32,400 such reports involving almost $800 million that year. That’s roughly double the complaints from 2024. FEDweek report on FBI data.
Transnational groups based in Southeast Asia coordinate much of this activity. A Justice Department announcement from June 2026 described “Disruption Week” efforts. Private companies and government partners disabled over 1.4 million scam-related social media and email accounts. They froze millions in cryptocurrency. Yet losses from investment scams alone climbed to $7.2 billion in 2025, per the latest IC3 annual figures. Many victims never report. Actual totals likely run far higher. Justice Department announcement.
TechRadar first flagged the trend in detail. Its coverage, reposted widely on July 21, 2026, echoes the IC3 alerts. Scammers often approach via social media or forums after an initial breach. They offer to help file an IC3 complaint or recover funds. But they request fees, crypto transfers, or sensitive details. The publication stresses one point. The IC3 will not ask for payment to recover lost funds. TechRadar article.
So how do you spot them? Look for pressure. Real agents don’t demand immediate action or threaten arrest over social platforms. Check every link. Type www.ic3.gov directly into your browser. Never click sponsored search results or messages that lead elsewhere. Examine videos closely. Deepfakes often show distorted hands, unnatural shadows, or mismatched audio. Slight spelling changes in email addresses or names give them away.
One fragment stands out. No urgency from the real FBI. Another. Official contact arrives through verified channels only.
And the double hit hurts most. A person loses savings to a romance scam or fake investment. They search for help. The next message claims to be from the bureau. It offers salvation. But it extracts what little remains. Or it steals identity for further crimes.
Reporting matters. The IC3 accepts complaints at its official site. Details help map patterns. Include all communications, transaction records, and platform information. Those 60 and older can call the Department of Justice Elder Justice Hotline at 1-833-FRAUD-11. Platforms themselves should act faster on fake profiles. Yet enforcement lags the pace of new accounts.
Recent coverage adds urgency. A Malwarebytes piece published hours after the latest PSA describes how scammers evolve. They use deepfakes in real-time chats to provide “proof” of legitimacy. The fear they generate clouds judgment. Victims wire funds before they realize the conversation itself was staged.
Broader data from the FBI’s 2025 report, referenced in a June 2026 Malwarebytes analysis, ties AI directly to the surge in impersonation and recovery fraud. Voice cloning alone appears in thousands of cases. The tools are cheap. The returns are high. Malwarebytes AI scams coverage.
Consumer protection agencies recommend simple steps. Tighten privacy settings so only approved contacts see posts. Ignore unsolicited investment tips on social feeds. Verify any company or service through official registries before engaging. And if a message claims to be from the FBI but arrived in your DMs, it’s almost certainly fake.
The pattern repeats across platforms. Facebook leads in reported losses. Instagram and WhatsApp trail but grow fast. Even LinkedIn sees attempts. Scammers buy aged accounts in bulk. They automate initial outreach. Then humans take over for the high-pressure close.
But here’s the reality. Awareness alone won’t stop it. Law enforcement needs better cross-border cooperation. Tech companies must improve detection of synthetic media. Users must treat every unexpected official contact with deep skepticism. The scams prey on hope. They exploit the very trust people place in institutions.
One more thing. The IC3 PSA links to earlier alerts on spoofing, law enforcement impersonation, and deepfakes. The advice converges. Verify. Report. Don’t pay. Those three rules have held for years. They matter even more now that AI can mimic an FBI director in minutes.
The rise won’t slow soon. Losses climbed again in 2025. New variants appear monthly. Yet the defense stays straightforward. Question the source. Check the domain. Protect your information. Anything less invites the second sting.
WebProNews is an iEntry Publication