VORANT. Threat Intelligence Research Create a free account

FBI Reissues Alert on Impersonation Scams

Published Vorant ratingroutine vulnerability Government (National)HealthcareEducation

Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

FBI/IC3 warns of ongoing law enforcement and government impersonation fraud that cost victims over $1.6 billion between January 2025 and July 2026.

Sourceic3.gov — open the original

What to check

Applies to
Whether this concerns you is not assessed; the names the report mentions are listed below.

The FBI's Internet Crime Complaint Center (IC3) has reissued a public service announcement updating a 2022 alert about widespread fraud schemes in which scammers impersonate US and foreign law enforcement or government officials to extort money or personally identifiable information from victims. Between January 2025 and July 2026, IC3 received nearly 61,000 complaints related to these scams, with reported losses exceeding $1.6 billion. Scammers primarily use unsolicited phone calls, but also employ text messages and emails, spoofing legitimate phone numbers, email addresses, employee names, and credentials of well-known agencies including IC3 itself. Common pretenses include accusing victims of crimes and threatening arrest, claiming missed jury duty or court dates, or asserting that a passport, driver's license, or professional license is expiring. Specific victim categories are also targeted, including medical practitioners (threatened with license revocation, $37M+ in losses) and members of foreign ethnic communities or international students threatened with extradition or passport cancellation ($140M+ in losses). Notably, the advisory flags that scammers are increasingly using AI-generated video to impersonate officials on video calls, adding a layer of perceived legitimacy to the scheme.

Payment is demanded via prepaid cards, couriers, bank wires, cryptocurrency, or cash deposited into cryptocurrency kiosks — all payment methods legitimate law enforcement agencies never use. This is a social-engineering/fraud advisory rather than a technical intrusion campaign; there are no IOCs, malware, or exploited vulnerabilities involved. Defenders in security-awareness and fraud-prevention roles should use this to update employee/customer training, particularly for organizations serving vulnerable populations (healthcare licensing bodies, international student services, ethnic community organizations) that are specifically named as targeted demographics. The FBI recommends verifying any law-enforcement contact independently via official public contact information, never providing PII or payment to unsolicited callers, and reporting incidents to IC3 and local financial institutions immediately.

Source reporting: https://www.ic3.gov/PSA/2026/PSA260917

Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.

What this brief leaves out

This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.

It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.

A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.

Create a free account   What it costs