FBI Warns: Fake IC3 Agents and Deepfakes Target Scam Victims

If you already reported a scam to the FBI's Internet Crime Complaint Center (IC3), or told the scammers you planned to report them, you could be a target twice over. On 20 July 2026, the FBI issued a public alert (I-072026-PSA), which updates an earlier alert from April 2025 (I-04182025-PSA), warning that criminals are impersonating FBI agents and the IC3 itself, using everything from Facebook Messenger accounts to AI-generated deepfake video, to re-victimize people who thought they had already done the right thing. Here is exactly what the scam looks like, how the real IC3 actually operates, and what to do if you already paid a fake "recovery agent."

Primary sources: FBI IC3 Public Service Announcement I-072026-PSA (20 July 2026) · FTC fraud reporting, reportfraud.ftc.gov

What the scam looks like

According to the FBI's alert, criminals are running two distinct versions of this scheme. Both are built to look like a natural continuation of a real IC3 complaint, which is what makes them convincing.

Variant 1: A fake FBI agent messages you directly

Someone posing as an FBI agent contacts you on Facebook Messenger or Telegram, sending a link asking you to "update" your IC3 complaint so your case can move forward. The link may contain malicious code or be used to collect more financial data to target you again. This is the same delivery method used in ordinary phishing, just wrapped in a badge and a case number to lower your guard.

Variant 2: An AI deepfake video sends you to a spoofed site

The FBI flagged a social media platform that shared AI-generated videos of a senior FBI leader, encouraging viewers to submit victim complaints on a spoofed IC3 website. The fake site mimics the real ic3.gov closely, but it strips the process down to a single form asking for your name, phone number, email address, the type of scam you experienced, and your estimated financial loss. That short form is the entire point: it is a data-harvesting page dressed up as a government portal, and every field you fill in becomes ammunition for a second scam aimed squarely at you.

In both cases, the goal is the same. Someone who has already lost money is an easier target the second time around because they are actively looking for help and already primed to trust anything that looks official.

How to protect yourself, and how to report the real way

The FBI's alert is direct about how the real IC3 operates, and none of it involves apps, chat, or social media.

• The IC3 itself has no social media presence. The FBI does run official social media accounts, but the IC3 has no social media presence, and it does not investigate crimes or recover funds through Facebook, Telegram, or similar platforms. Any account offering to handle your IC3 complaint through a chat app is impersonating a federal agency.
• The real IC3 will never directly contact you. The FBI's alert says IC3 will never directly contact you via phone, email, social media, phone apps, online chat, or public forums. It does not message you first to "update" a complaint, and it does not ask you to click a link sent over Messenger or Telegram.
• IC3 will never ask for payment to recover lost funds. The IC3 does not recover funds for complainants, and it will never refer you to a company that charges for recovery. The FTC says no government agency will demand you pay by wire transfer, gift cards, cryptocurrency, or a payment app. That request is always the scam.
• File a report the right way: type the address yourself. Open a browser and type www.ic3.gov directly rather than clicking a link from a message, email, or video. This alone defeats the spoofed-site version of the scam.
• Skip sponsored search results. If you search for "IC3" or "FBI fraud report," avoid links labeled "Ad" or "Sponsored," and check that the address you land on ends in .gov before entering any information.
• Or use the FTC's own portal, a separate official option. You can also file a report at reportfraud.ftc.gov, the Federal Trade Commission's official fraud reporting site, if you are unsure about a link claiming to be IC3.
• Check any link before you tap it. If you already clicked something suspicious, our guide on what to do after clicking a phishing link walks through securing your accounts and devices step by step.

If you already paid a fake recovery agent

If you sent money, gift cards, cryptocurrency, or personal and financial details to someone claiming to be from the FBI or IC3, act quickly and in this order.

1. Contact your bank or card issuer immediately. Report the transaction as fraudulent and ask about reversing or freezing it. The sooner you call, the better your chances of stopping or clawing back a payment.
2. File a genuine report with the real IC3. Go to www.ic3.gov directly (never through a link someone sent you) and file a new complaint describing the impersonation scam itself, including any screenshots, usernames, phone numbers, and the fake website address.
3. File a parallel report with the FTC at reportfraud.ftc.gov. This helps build the broader fraud picture and can support any dispute you raise with your bank or card company.
4. Report the impersonating account to the platform. Use Facebook's or Telegram's built-in reporting tools to flag the fake FBI profile so it can be removed and does not reach the next victim.
5. Change any passwords you entered on the fake site, starting with email and banking, and turn on two-factor authentication where you have not already.
6. Expect follow-up attempts. Once scammers know you have already paid once, you are more likely to be approached again by someone offering to "recover" what you lost, for a further fee. Treat any unsolicited recovery offer, no matter how official it looks, as a second attempt at the same scam.
7. If you are 60 or older, call the DOJ Elder Justice Hotline. The Department of Justice's National Elder Fraud Hotline, 1-833-FRAUD-11 (833-372-8311), connects older adults targeted by fraud with case managers who can help with reporting.

FAQ

Does the FBI or IC3 ever message people first on Facebook or Telegram?

No. The IC3 has no social media presence, and it does not investigate crimes or recover funds through Facebook, Telegram, or similar platforms. The FBI's alert says IC3 will never directly contact you via phone, email, social media, phone apps, online chat, or public forums. Any such contact is an impersonator.

Is it possible to tell a deepfake video from a real FBI announcement?

Look for subtle imperfections such as distorted hands or feet, or unrealistic facial features, which the FBI notes are common tells in AI-generated video. But the safest rule is to never follow the video's link: type www.ic3.gov into your browser yourself to check for genuine alerts.

Do I have to pay anything to file a complaint?

No, filing is free. You can file with the real IC3 (www.ic3.gov) or, as a separate official option, with the FTC (reportfraud.ftc.gov). Any person or site asking for a fee, gift cards, or cryptocurrency to process your complaint, or to "recover" or "release" your funds, is not affiliated with either agency: IC3 does not recover funds for complainants.

Sources: FBI IC3 Public Service Announcement I-072026-PSA · FTC, reportfraud.ftc.gov

If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.