What Is the FBI IC3 Impersonation Scam?
The FBI's Internet Crime Complaint Center (IC3) is the real federal agency where Americans report online crime — phishing, ransomware, romance scams, investment fraud, and more. Millions of people file complaints through IC3 every year, and the agency genuinely does refer cases to law enforcement for investigation. That legitimacy is exactly what makes it such an effective vehicle for impersonation fraud.
In the IC3 impersonation scam, a criminal contacts you claiming to be an FBI agent, IC3 investigator, or FBI Cyber Division specialist. They may reference a complaint you actually filed — or claim you're a victim of a scam they're investigating. They offer to help recover your stolen money, catch the scammers, or expedite your case. The catch: to "process" your recovery or "verify your identity," they need your bank details, a processing fee, or access to your computer. None of this is real. The real FBI IC3 never contacts victims this way, never charges fees, and never promises to recover your money.
This scam has surged in 2026 because scammers now have access to breach data that includes names, phone numbers, and even complaint reference numbers. When a scammer knows you filed an IC3 complaint and quotes your case number back to you, the call feels authentic — which is exactly the goal.
How the IC3 Impersonation Scam Plays Out
The scam typically follows a predictable sequence. First, you receive a phone call, email, or message from someone claiming to be an FBI IC3 agent. They use official-sounding titles — "Special Agent," "Cyber Crime Investigator," "IC3 Case Manager" — and may reference a real or fabricated complaint number. If you've previously filed an IC3 complaint (which many scam victims have), the caller's knowledge of your case details makes the approach extremely convincing.
Second, the "agent" tells you they've identified the scammers who defrauded you and that your money has been recovered — or is being held in escrow pending verification. To release the funds, they need you to "verify your identity" by providing your bank account number, Social Security number, or a copy of your ID. Some versions ask you to pay a "recovery processing fee" or "international transfer fee" upfront via wire transfer, cryptocurrency, or gift cards.
Third, if you've already lost money to a scam, the IC3 impersonator may ask you to install "investigation software" or grant remote access to your computer so they can "trace the fraudsters' transactions." What they're actually doing is installing malware, accessing your banking sessions, and draining whatever funds you have left. Victims who fell for the first scam often lose even more to the second — the impersonator who promises to help.
Fourth, the money disappears. The "recovered funds" never arrive. The processing fee is gone. Your bank account may be drained through the remote-access software. And the "agent" vanishes — often using a spoofed phone number that can't be traced back to them.
Red Flags: How to Spot a Fake FBI Agent
These are the specific signals that someone claiming to be from the FBI IC3 is a scammer:
1. The FBI does not call victims to offer money recovery. IC3 accepts complaints and refers them to law enforcement — it does not proactively contact victims to return funds or offer investigative updates. If someone calls you promising to recover money you lost, they are not from the FBI.
2. No real FBI agent asks for payment of any kind. Whether it's a "processing fee," "verification fee," or "transfer fee," any request for money — especially via wire transfer, cryptocurrency, or gift cards — is an immediate red flag. The FBI never charges victims for investigations or fund recovery.
3. No real FBI agent asks for your bank details or Social Security number over the phone. Legitimate FBI contact, when it occurs, happens through official written correspondence or an in-person visit with verifiable credentials — not an unsolicited call asking for sensitive information.
4. No real FBI agent asks you to install software or grant remote access. A request to install "investigation tools," "tracking software," or grant remote desktop access is a hallmark of tech-support and fund-draining scams. The FBI does not ask victims to install software on their computers.
5. The caller pressures you to act immediately. Scammers create urgency to prevent you from verifying their identity. A real FBI agent would understand if you wanted to verify their credentials — a scammer will become aggressive or threatening if you hesitate.
Why This Scam Is So Devastating
The IC3 impersonation scam is uniquely cruel because it targets people who have already been victimized. If you've lost money to a romance scam, investment fraud, or phishing attack, you're vulnerable, desperate for help, and more likely to trust someone who claims to be from the agency you reported the crime to. Scammers know this — they specifically target previous scam victims, using breach data and public complaint records to identify their marks.
The scam also exploits a knowledge gap. Most people don't know how IC3 actually works — they assume that filing a complaint means an agent will be assigned to their case and will contact them with updates. In reality, IC3 is a reporting and referral center, not an investigative unit that contacts individual victims. Understanding this distinction is your best defense.
The financial damage compounds quickly. Victims who lost $5,000 to the original scam may lose another $10,000 to the "recovery agent" — paying fees, granting account access, and wiring funds to a criminal who promised to help. Some victims are targeted by multiple impersonators in succession, each claiming to be from a different agency.
What to Do If You've Been Contacted by a "FBI Agent"
If someone claiming to be from the FBI IC3 contacts you, take these steps:
1. Hang up or stop responding. Do not provide any personal information, banking details, or payment. Do not install any software or grant remote access. The single most important action is to end the contact immediately.
2. Verify through official channels. If you want to confirm whether the contact is legitimate, call the FBI field office in your region directly — the phone numbers are listed at fbi.gov/contact-us. Do not call back the number that contacted you, even if it appears to be an FBI number (caller ID spoofing is trivial for scammers).
3. If you've already provided information or paid, act immediately. Contact your bank to flag potential fraud and freeze affected accounts. Place a fraud alert with one of the three credit bureaus. File a report with the real IC3 at ic3.gov — yes, the actual IC3, where you can document the impersonation scam itself.
4. Report the scam to the FTC at reportfraud.ftc.gov. Include any phone numbers, email addresses, or website URLs the scammer used. If the scammer directed you to a website, run that URL through Scam Detective before entering any information — a $1 URL check can confirm whether the site is a phishing page.
5. Warn others. If you're part of a scam victim support group or online community, share your experience. IC3 impersonation scams rely on victims not knowing they exist — awareness is the most effective prevention. For more on how scammers impersonate trusted entities, read our guide on bank impersonation courier scams.