Scammers Are Impersonating the FBI's Own Fraud Hotline

The Second Scam Is the Cruelest One

Once you've been scammed, you're not just out money. You're shaken, and you want to believe someone is working to fix it. That's the opening these scammers exploit.

The FBI's Internet Crime Complaint Center, known as IC3, is the official place to report online fraud. It's legitimate, well-known, and trusted, which is exactly why scammers are impersonating it.

According to KPTV's August 2026 report on the FBI's public warning, the scheme works like this: scammers monitor social media for people who post about reporting fraud to the FBI, then reach out posing as IC3 agents. They claim they've located the victim's lost funds and just need a payment to release them. It's a second crime disguised as a rescue.

How They Make It Look Real

These scammers aren't reading from a script with a bad phone connection. They're using a full toolkit to appear legitimate.

The FBI's warning describes five methods used together: phone calls from numbers that look official, emails that mimic IC3 branding and language, fake IC3 websites that look nearly identical to the real thing, AI deepfake videos of what appear to be real federal agents, and AI voice cloning to sound like someone you'd trust.

Voice cloning now requires as little as 20 to 30 seconds of audio. With enough publicly available recordings of real government officials, scammers can generate a voice that passes every instinct you have. The caller sounds official. The email looks official. The website looks official. None of it is real.

Why Fraud Victims Get Targeted Twice

Recovery scammers specifically look for people who have already been victimized. The psychology is deliberate. People who've lost money want a resolution, and when someone calls claiming to be from the FBI and says they can get your money back, the impulse to believe them is strong. Skepticism drops. The shame of having been scammed once can also make people reluctant to question a second contact that seems official. This is not a character flaw. It's something the scammers count on.

What the Real FBI Will and Won't Do

The actual IC3 does not call victims to inform them their money has been recovered. It does not request fees, payments, or wire transfers in exchange for returning funds. If someone contacts you claiming to be an IC3 agent and asks for any form of payment, that is a scam.

To reach IC3, go to ic3.gov by typing it directly into your browser. Don't click a link in an email or message.

If you receive a suspicious call from someone claiming to be with the FBI or IC3, hang up. Then contact the FBI through ic3.gov or call your local FBI field office using a number you find independently through fbi.gov, not one the caller gave you.

One important note: calling back on an official number confirms you reached the right organization, but it does not prove the original caller was legitimate. The original call may still have been a scam attempt, even if a real agent answers when you call the official line. Use independently sourced contact information and report the original call so investigators can track the pattern.

AI Makes Your Instincts Unreliable

For most of history, a familiar voice on a phone meant something. Caller ID meant something. An official-looking document meant something. None of those things mean what they used to.

AI voice cloning can replicate a voice from a short audio sample. Caller ID can be spoofed to show any number, including government numbers. Fake websites are cheap to build and convincing to view. A deepfake video can show you a face saying words that person never said.

The FBI's own cybercrime division is now being impersonated using these tools. The answer isn't to distrust everything permanently. The answer is to add a verification layer that these tools cannot fake.

A Simple Check That AI Cannot Fool

Trust Onion gives anyone a straightforward way to verify a person or institution before trusting a call, email, or message. You share three private rotating codewords with the people and contacts you trust. The words change every 60 seconds, calculated locally on your phone with no server required.

When someone calls claiming to be from your bank, your family, or a government agency you've been dealing with, you ask one question: what are the words? A real contact you've set up with Trust Onion can answer. A scammer with a cloned voice, a spoofed number, and a fake website cannot. They have no way to know three private words that expire in under a minute and were never transmitted anywhere.

AI can clone a voice. It cannot fake knowing three codewords that change every 60 seconds and exist only on your phone. Trust Onion is free, works offline, and adds a verification layer that no amount of voice cloning, caller ID spoofing, or fake website design can get around.

If You Think You've Been Targeted

If you believe you were contacted by someone impersonating IC3 or the FBI, report it at ic3.gov directly. Don't send money, don't provide personal information, and don't call back on a number the caller gave you.

If someone you know may be in immediate danger or actively manipulated, contact local law enforcement.

If you've reported a scam anywhere publicly, including on social media, treat any follow-up contact offering help as unverified until you've confirmed it through independent channels.

A controlled voice-cloning safety demonstration

Try our tool to see just how easy voice cloning is. This controlled safety demonstration exists only to show how easy voice cloning is and to make the risk tangible. It is not a real incident or proof of anyone's identity. Your submitted sample is handled transiently to generate the fixed demonstration audio. Trust Onion does not identify you or the person from the sample. Trust Onion does not store the submitted recording, clone, or generated audio.