LIVE · cybersecurity feed
Live wire
security

Don’t trust that “FBI agent” in your DMs

The Federal Bureau of Investigation's Internet Crime Complaint Center (IC3) has issued a warning regarding an increase in "recovery scams" where criminals impersonate FBI agents and IC3 employees on social media and messaging applications. These scammers specifically target individuals who have previously fallen victim to cybercrime, aiming to defraud them again.

ZeroDay News ·

Source: Malwarebytes Labs

The Federal Bureau of Investigation's Internet Crime Complaint Center (IC3) has issued a warning regarding an increase in "recovery scams" where criminals impersonate FBI agents and IC3 employees on social media and messaging applications. These scammers specifically target individuals who have previously fallen victim to cybercrime, aiming to defraud them again.

The FBI states that these schemes are becoming more sophisticated, often featuring official-looking FBI logos and branding to enhance their credibility. Scammers create fake social media accounts, sometimes with fabricated positive reviews, to lure victims. An example provided described an account named "Reliable Scam Recovery Inc" or "Ic3 Scam Recovery Inc" that promised assistance with recovering funds lost to various online frauds, including investment, crypto, and romance scams.

These fraudulent posts contain vague but reassuring claims, such as having an "experienced recovery team" and offering "professional case assessment" and "secure and confidential support." They also make high-level promises like "investigate scam activities" and "trace transactions," implying specialized legal or technical capabilities that legitimate agencies possess.

Scammers actively monitor social media for posts from individuals who have reported a scam to the FBI or intend to do so. They then contact these victims directly, posing as FBI follow-up contacts. To further convince skeptical victims, some scammers create deepfake audio and video content depicting senior FBI officials or other recognizable public figures urging victims to submit their case through a specific link to "speed up recovery." The FBI confirms that criminals are increasingly utilizing AI-generated deepfake technology to make these messages appear authentic.

The IC3 emphasizes that it does not maintain an official social media presence and does not investigate crimes or contact victims directly via social media to recover funds. The IC3's official website explicitly states that it does not collaborate with non-law enforcement entities, such as law firms or cryptocurrency services, for fund recuperation or case investigations, and will never directly solicit information or money from victims.

To avoid falling victim to these recovery scams, the FBI advises several precautions. Individuals should never pay upfront fees to recover stolen money, as legitimate government agencies do not request advance payments for such services. Unsolicited claims from anyone offering to reverse a previous scam should be viewed with extreme suspicion. Victims should never provide remote access to their devices, share passwords, recovery phrases, identification documents, or financial information with unknown third parties, as this information can be used for identity theft or further fraud.

If a message or contact from an alleged "agent" appears in direct messages shortly after a public post about being a crime victim or reporting to the FBI, it should be assumed to be a scammer unless independently verified through official channels. Suspected scams should be reported to the IC3 at ic3.gov.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.