FBI warns that scammers are now impersonating IC3 handlers with deepfakes and spoofed sites to hit people who already lost money once. If you've filed a complaint or been scammed before, treat any follow-up call or video as suspect.Cyber Resilience desk
Sources (2)
What this means for you — CISO:This targets consumers, not your org directly, but if your help desk or fraud team interacts with scam victims, brief them: fake 'FBI agents' now use deepfake video and spoofed IC3 sites to re-victimize people who already reported losses.
What this means for you — Lean IT orgs:If you or a customer reported a scam to IC3 before, be alert: scammers are now posing as FBI agents (even with fake video) to steal more money or data under the guise of 'recovering' it. No real FBI contact will ask for payment or account access.
What this means for you — MSP:Add this to client security-awareness materials, especially for clients in finance or retail who deal with scammed customers; flag any spoofed IC3 domains you spot in DNS or web filtering logs.
What this means for you — Researcher:Worth tracking: FBI/IC3 says the campaign has evolved since April 2025 to include AI-generated deepfake video of officials and spoofed IC3 web pages — a concrete case of impersonation escalation via generative AI.