Impersonation Scams Are Getting Harder To Spot

We’ve all gotten them: the urgent text claiming your account is locked, or the frantic phone call from someone pretending to be a government agent. But if you think you can easily spot a scammer these days, you might need to look again.

Fraudsters have greatly upgraded their toolkits. By leveraging new technology, they are impersonating trusted sources—like your bank, the FBI, FTC (Federal Trade Commission), or even your family members—with terrifying accuracy.

The threat landscape is escalating fast. US impersonation scam attempts surged an astonishing 130% in just one year. Even worse, according to the FTC, bank impersonation scams now account for the highest financial losses of any impersonation category. In many cases, victims lose everything in their accounts.

Here is a look at how these scams are evolving, the next-level AI tactics to watch out for, and your playbook for staying safe.

‍The "Classics" Are Still Working

While scammers are adopting new tech, they still rely heavily on the psychology of panic. Their goal is always to get you to act fast, bypassing your critical thinking.

• Phishing & Smishing: Deceptive emails or texts (sms-phishing) that look exactly like they came from a trusted company. They usually feature a malicious link asking you to "verify" your login credentials to resolve a fake issue.
• Vishing: The phone-call equivalent. A scammer poses as an authority figure and demands sensitive information (like your Social Security number or credit card) to solve an "urgent problem."
• Bank Impersonation: A highly effective hybrid. Fraudsters visually alter (“spoof”) caller IDs so your phone actually looks like it’s receiving a call from your bank name. They create panic about a "compromised account" and instruct you to transfer money to a "safe" account, or demand your online verification one-time passcode (OTP).‍

Next-Level Threats: Deepfakes and "Re-Targeting"

According to recent warnings from the FBI’s Internet Crime Complaint Center (IC3), the fraud playbook has gotten a massive high-tech upgrade.‍ Scammers are now using artificial intelligence to create "deepfakes"—hyper-realistic, AI-generated videos and audio clones.

• Video chats: Fraudsters can generate real-time video feeds that make it look like you are talking to a real company executive, law enforcement officer, or family member.
• Voice cloning: It only takes a few seconds of audio for a scammer to clone a known contact's voice. The person on the other end of the line might sound exactly like someone you trust. The FBI tracked 22,364 AI-related complaints in 2025 and roughly $893 million in losses, the first year artificial intelligence appeared as its own category in the report. A phone call in your CFO's voice is no longer a hypothetical.
• Spoofed government sites: Scammers are circulating deepfake videos of senior FBI leaders on social media to promote a fake IC3 website. The spoofed site looks authentic, but uses a simplified intake form to quickly harvest your financial details.‍

The "Re-Targeting" Double-Cross

Scammers are now hunting victims twice. They create fake FBI personas on platforms like Facebook Messenger or Telegram. If a victim realizes they are being scammed and threatens to report it, the scammers reach out pretending to be the FBI. They offer to help the victim "update their IC3 report," sending a malicious link designed to steal more data and revictimize them.‍

Your Fraud-Fighting Playbook

Outsmarting scammers starts with second-guessing what you see and hear. Here is your checklist for keeping your personal information secure:

• Pause and Verify: If a message or call creates a sense of panic, fear, or urgency, stop. Legitimate businesses and government agencies do not operate this way.
• Don't Immediately Trust Caller ID: It is incredibly easy to spoof. If you get a suspicious call, hang up. Contact your bank or the organization directly using a verified number—like the one on the back of your debit card or their official website.
• Keep Your Codes to Yourself: Fully read an OTP email or text message to know if it’s a verbal identity verification code or if the code shouldn’t be shared with anyone else. Your bank will never tell you to transfer money to another account to protect it from fraud. Furthermore, never give out your password, PIN, or online verification one-time passcodes (OTPs) to anyone who contacts you.
• Look for the "Glitches": When watching videos or taking calls, look for subtle AI imperfections: distorted hands, unrealistic shadows, unnatural eye movements, or slight lags in audio.
• Know the IC3's Rules: The real IC3 does not maintain social media accounts and will never communicate with you via Facebook, Telegram, or public forums. They will also never ask for payment to recover lost funds.
• Navigate Safely: When filing a report, type www.ic3.gov directly into your browser. Avoid "sponsored" search engine results (which are often paid imitators), and ensure the URL strictly ends in .gov.‍

What to Do If You're Targeted

If you or someone you know has interacted with a scammer, time is of the essence:

1. Lock it down: Contact your bank immediately to secure your accounts and flag the fraud.
2. Report it: File a complaint with the official FBI Internet Crime Complaint Center exclusively at www.ic3.gov. Include every detail you can: names, phone numbers, crypto addresses, URLs, and a timeline of the interaction.
3. Ask for help: Victims aged 60 or older who need assistance filing an IC3 complaint can contact the DOJ Elder Justice Hotline at 1-833-FRAUD-11 (1-833-372-8311).

Want to learn more about cybersecurity? Visit our Security Center for additional resources and tips.