Imposter Scams on the Rise: How to Protect Yourself

Imposter scams are one of the fastest-growing forms of fraud in the United States. In these scams, criminals pretend to be trusted organizations such as banks, government agencies, employers, or well-known companies to trick people into sending money or sharing sensitive information.

Fraudsters have never been more convincing or more costly. The Federal Trade Commission (FTC) is sounding the alarm after Americans lost a staggering $3.5 billion to imposter scams in 2025, the highest total on record.

Whether they’re posing as your bank, a government agency, or even the FTC itself, scammers are exploiting digital channels at scale, and social media has become their most profitable hunting ground. If you think you are savvy enough to spot a scam, think again. These schemes are growing more sophisticated by the day.

What Are Imposter Scams?

An imposter scam occurs when a criminal pretends to represent a trusted person or organization, such as a bank, government agency, employer, or well-known company, to convince victims to send money or share personal information.

Imposter Scam Statistics for 2025:

• $3.5 billion has been lost to imposter scams in 2025, with losses nearly tripled since 2020.
• Nearly $1 billion was lost to business impersonators; approximately $920 million to government impersonators.
• More than $2.1 billion in 2025 losses were traced to social media, an eightfold increase since 2020.
• Nearly 1 in 3 Americans who lost money were first contacted through social media.
• Facebook’s losses alone exceeded those from text and email combined; WhatsApp and Instagram ranked second and third.
• Overall reported fraud losses across all categories surged to about $16 billion in 2025, roughly 25% above the prior year.
• Since the FTC’s Impersonation Rule took effect in April 2024, the agency has secured more than $70 million in consumer redress and impeded some imposter schemes.

How to Protect Yourself from Imposter Scams

Scammers are counting on you to act fast and not ask questions. Here’s how to flip the script.

1. Slow down and verify independently

   Scammers rely on urgency. If you receive an unexpected alert from your bank, the IRS, or Social Security Administration, hang up and call the official number listed on their website, not a number provided in the message. Even if you recognize the name (your CEO, manager, vendor, etc.), you should independently verify requests using known contact methods.

2. Never transfer money to “protect” your account

   Legitimate banks and government agencies will never ask you to wire money, buy gift cards, or send cryptocurrency to keep your account safe. That’s the hallmark of an imposter scam.

3. Be skeptical of social media contacts

   With over $2.1 billion in losses traced to social platforms in 2025, treat unsolicited messages on Facebook, WhatsApp, and Instagram with extreme caution, especially if they ask for money or personal information. You should also limit public exposure of information like job roles, organizational charts, etc. on social media and avoid posting sensitive operational details.

4. Don’t trust caller ID or email addresses

   Scammers can spoof phone numbers and email addresses to look legitimate. A call that appears to come from the IRS or your bank may not be real.

5. Guard your personal information

   Never share Social Security numbers, bank account details, or passwords in response to an unsolicited call, text, or email, no matter how official it looks.

6. Use multi-factor authentication (MFA)

   Secure your financial and email accounts with MFA to reduce the risk of unauthorized access even if your credentials are compromised.

7. Report scams immediately

   If you encounter or fall victim to an imposter scam, report it to the FTC at ReportFraud.ftc.gov. Your report helps the agency track patterns and take enforcement action. You should also report suspicious activity on your work accounts to the appropriate security or IT team for review so they can block threats and protect others within your organization.

Stay Safe from Imposter Scams

Imposter scams are no longer a niche threat. They’re the most common form of fraud in America, and the numbers keep climbing. With $3.5 billion lost in 2025 alone and social media serving as the scammers’ preferred weapon, everyone is a potential target.

The FTC is fighting back with enforcement actions and new rules, but consumer awareness remains the first and most critical line of defense. When in doubt, verify before you act, and remember, no legitimate organization will ever pressure you to move money on the spot.

For more tips to protect you from scams, check out these blog articles.

FAQs About Imposter Scams

How do imposter scams work?

Imposter scams occur when criminals pretend to be someone you trust, such as your bank, a government agency, your employer, or a well-known company—to convince you to send money or share sensitive personal information. Scammers often create a false sense of urgency and may use spoofed phone numbers, emails, or social media accounts to appear legitimate.

What should I do if I fall for an imposter scam?

If you believe you’ve fallen victim to an imposter scam, contact your bank or financial institution immediately to help secure your accounts. Change any compromised passwords, enable multi-factor authentication, and report the scam to the FTC at ReportFraud.ftc.gov. If the scam involved your workplace, notify your organization’s IT or security team as soon as possible.

What are the most common imposter scams?

Common imposter scams include criminals posing as government agencies like the IRS or Social Security Administration, banks, tech support, delivery services, employers, family members, or well-known businesses. Scammers often demand payment through wire transfers, gift cards, or cryptocurrency, claiming immediate action is required.

How can I verify if a message is legitimate?

If you receive an unexpected call, text, email, or social media message, don’t use the contact information provided in the message. Instead, contact the organization directly using the phone number or website you know is legitimate. Be cautious of urgent requests for money, personal information, or account credentials, as these are common warning signs of an imposter scam.