FBI Warns of AI Deepfake Recovery Scams Using Fake IC3 Websites
The Federal Bureau of Investigation (FBI) has issued a new Public Service Announcement (Alert Number I-072026-PSA) warning the public about a rapidly evolving cyber fraud campaign that leverages artificial intelligence (AI), deepfake technology, and spoofed Internet Crime Complaint Center (IC3) websites to exploit individuals who have already been victims of financial scams.
Released on July 20, 2026, the advisory highlights a sharp increase in sophisticated social engineering attacks that combine identity impersonation, phishing techniques, and AI-generated synthetic media to deceive users into disclosing sensitive information or making additional payments.
The FBI has emphasized that these attacks are becoming increasingly convincing due to advances in generative AI, making them a growing cybersecurity concern for both individuals and organizations
FBI Warns of AI Deepfake Recovery Scams.
According to the FBI, cybercriminals are primarily conducting “recovery scams,” a tactic specifically designed to target victims who have previously lost money through online fraud.
Attackers contact these individuals while falsely claiming to represent the FBI, the IC3, or affiliated recovery services. They promise assistance in recovering stolen funds but instead seek to obtain additional personal information, banking credentials, cryptocurrency payments, or other financial assets.
By exploiting victims who are already emotionally distressed and eager to recover their losses, the scammers significantly increase their chances of success.
The agency reports that attackers use multiple communication channels, including emails, telephone calls, text messages, social media platforms, and sponsored online advertisements.
In many documented cases, victims are approached shortly after expressing interest in reporting fraud or submitting complaints to law enforcement, creating the false impression that the outreach is part of an official investigation.
This carefully timed social engineering strategy increases the credibility of the fraudulent communications and encourages victims to lower their guard.
One of the most concerning aspects of the campaign involves the creation of fraudulent IC3 complaint portals that closely resemble the legitimate FBI Internet Crime Complaint Center website.
These spoofed websites replicate official branding, layouts, and submission forms to convince users they are interacting with a trusted government service.
Victims are prompted to enter personally identifiable information (PII), financial account details, and descriptions of previous fraud incidents. Some fake portals even generate fabricated complaint reference numbers after submission, reinforcing the illusion that a legitimate report has been filed while redirecting users back to the homepage with limited functionality.
The FBI also warns that cybercriminals are increasingly using AI-generated deepfake videos and synthetic voice technology to impersonate senior U.S. government officials, law enforcement personnel, and corporate executives.
These realistic videos are distributed through social media platforms such as Facebook and Telegram to promote fake recovery services and fraudulent IC3 websites.
In more advanced attacks, scammers use AI-powered voice cloning during live phone conversations, making it difficult for victims to distinguish genuine officials from cybercriminals.
The widespread availability of generative AI tools has dramatically lowered the technical barriers for producing convincing fake content, enabling fraud campaigns to scale rapidly.
The FBI reiterates that the Internet Crime Complaint Center (IC3) does not maintain official social media accounts and will never contact victims through messaging platforms, unsolicited phone calls, or emails to offer fund recovery services or request payments.
Users are strongly advised to access IC3 services only by manually entering the official website address into their web browser rather than clicking links received through emails, advertisements, or social media posts.
Indicators of fraudulent websites include slight URL variations, poor website quality, requests for cryptocurrency or gift card payments, and demands for sensitive financial information.
To reduce the risk of falling victim to these increasingly sophisticated scams, the FBI recommends carefully verifying all unsolicited communications, particularly those creating a sense of urgency or emotional pressure.
Individuals should remain alert for signs of AI-generated media, including unnatural facial expressions, inconsistent lip synchronization, distorted audio, or irregular visual artifacts.
Anyone who suspects they have encountered a fraudulent recovery scheme should immediately report the incident through the official IC3 reporting portal and provide detailed information regarding communications, financial transactions, cryptocurrency wallet addresses, email accounts, and other identifiers that may assist law enforcement investigations.
As AI-powered deception continues to evolve, cybersecurity awareness and verification of official communications remain essential defenses against next-generation social engineering attacks.
No Comment! Be the first one.