Scammers posing as Federal Trade Commission employees are texting photos of counterfeit badges to convince victims they can recover money lost in an earlier fraud, the agency warned this fall as Cybersecurity Awareness Month began.
The scheme is a refund-and-recovery variant: a stranger contacts you, claims to be a government investigator, and promises to claw back funds if you cooperate. The new wrinkle is visual proof—a badge image meant to override skepticism built up after years of fake IRS and Social Security calls.
How the conversation unfolds
According to the FTC’s June consumer alert, targets receive an unexpected message on a texting app or encrypted chat from someone they do not know. The sender introduces themselves as an FTC agent who can help “recover losses” from a prior scam. To prove legitimacy, they transmit a photo of an employee identification card.
The ID is fabricated. Federal investigators do not open cases through unsolicited texts, and they do not charge consumers to return stolen money. Once trust is established, the impostor typically asks for an upfront fee, a wire transfer, cryptocurrency, or access to a bank login.
Rules a real FTC employee follows
The agency lists hard limits on contact methods. Staff do not reach the public through WhatsApp or similar messaging apps to start an investigation. They do not text badge photos as verification. They do not instruct you to move money to a “protected” account or buy gold for safekeeping—tactics seen in other government impersonation rings this year.
Legitimate FTC refunds flow from announced settlements and are usually automatic or require a simple online claim form. Recent examples include expanded payouts linked to Amazon shipping practices, where eligible buyers are identified from transaction records rather than cold outreach.
Overlap with open-enrollment fraud
Separately, the FTC urged Medicare shoppers not to click paid search ads that mimic Medicare.gov during the fall enrollment window. Fraudsters buy top placement on search engines, copy government color schemes, and harvest Social Security or Medicare numbers under the guise of plan shopping.
Type official addresses directly—Medicare.gov and Healthcare.gov—and hang up on anyone who pressures you to decide on the spot. Medical identity theft can take longer to unwind than a stolen credit card number because bogus claims can linger in insurer systems.
What to do if you are targeted
Do not reply to the badge photo or send money. Save screenshots, then file a report at ReportFraud.ftc.gov. If you shared banking credentials, call your institution’s fraud line the same day and ask for account holds or password resets.
Recovery scammers specialize in double victimization: people already embarrassed by a first loss are told only a secret government channel can help. Sharing the FTC’s plain-language “will not” list with family members who forward suspicious texts is often more effective than debating whether a badge looks official.
Local law enforcement may take a report for documentation, but federal impersonation cases are aggregated through the FTC’s complaint database, which feeds investigations and public warning campaigns like the one running this October.
Elder-care attorneys report clients forwarding badge photos to family group chats for a second opinion—a useful habit if the image arrives outside business hours when agency switchboards are closed. Waiting until morning to call the FTC’s public inquiry line beats acting on a midnight text.
Employers rolling out security training this month should pair the badge scam with examples of fake payroll departments requesting gift cards. The social engineering pattern repeats across industries even when the costume changes.