FBI IC3 AI Impersonation Scam Uses Deepfakes and Spoofed Websites to Revictimize Fraud Victims

The FBI has updated its warning about an IC3 AI impersonation scam that now uses AI-generated videos, cloned voices, and spoofed websites to target people who have already lost money to fraud. Scammers impersonate FBI personnel and the Internet Crime Complaint Center (IC3) to create a false sense of authority and steal more personal and financial data.

What happened

Criminals have expanded existing fraud schemes by combining several exploitation tactics. According to an updated FBI Public Service Announcement (PSA), scammers now use AI-generated videos or deepfakes featuring supposed FBI officials to promote spoofed versions of the official IC3 website. The fake sites are designed to look legitimate but have limited functionality, typically only a complaint submission form.

The PSA describes a reported case where an AI-generated video depicted a senior FBI leader encouraging users to submit complaints through a fake IC3 website. The spoofed form requested the victim's name, phone number, email address, scam type, and estimated financial loss.

How scammers reach victims

In one variant, criminals create fake social media profiles and pages impersonating FBI personnel to lure previous scam victims into what the FBI calls "re-targeting" scams. After a victim tells the original scammers they plan to report the incident, an impersonator contacts them through Facebook Messenger, Telegram, email, phone calls, or online ads. The impersonator sends a link claiming to update an existing IC3 complaint. The link may contain malicious code or collect additional financial information.

Why AI builders should care

This IC3 AI impersonation scam shows how AI-generated content can mimic government authorities at low cost. For teams building fraud detection systems, identity verification workflows, or content authentication tools, the attack pattern highlights several design requirements. AI-generated videos and cloned voices can now convincingly fake law enforcement figures during real-time video chats or private communications. Security products should treat any unsolicited contact from supposed authorities as high-risk unless verified through independent channels.

Practical implications

The FBI provides straightforward guidance. Always type www.ic3.gov directly into your browser to file a complaint, and confirm the URL ends in .gov. The IC3 does not have a social media presence and will never contact individuals through phone, email, social media, messaging apps, or public forums. The agency also does not recover funds through Facebook or Telegram and will never request payment for fund recovery.

Warning signs in manipulated media include distorted hands or feet, unrealistic facial features, irregular faces, unusual accessories, inaccurate shadows, watermarks, unnatural movements, and voice call delays. Be cautious when content triggers strong emotions like fear or anger, as scammers design these reactions to bypass critical thinking.

Caveats

The primary evidence comes from an FBI PSA and media reports covering the same warning. The reported tactics may vary across individual cases. The PSA emphasizes verification rather than claiming all similar links or messages are malicious. The new element is the use of AI-generated video and voice cloning to impersonate authority figures, which lowers the technical barrier for convincing impersonation.