Scammers are posing as FBI personnel and fraud investigators on Facebook to hit people who have already lost money a second time — a so-called “recovery” con that exploits trust in a federal agency’s name, and that Meta says it removed only after the profiles and ads were flagged to the company.
The latest example came from a reader of the CyberGuy column, identified as Patrick K, who sent screenshots of suspicious fraud-recovery ads and profiles on Facebook. One showed an ad promoting stolen-asset recovery services. Another showed a page titled “Director of Fraud Investigations” that carried references to IC3, the FBI’s Internet Crime Complaint Center, and to the U.S. government. Its description claimed to help fraud victims navigate the IC3 reporting process. The names on such profiles are almost certainly invented, and no one has been charged. The pitch is simple. People who lost money, including to cryptocurrency schemes, are told that a recovery expert, investigator or government official can retrieve the funds. The ad invites them to message through Facebook Messenger to start the “recovery.” That is where a second round of theft begins, through fees, stolen personal data or malicious links. Columnist Kurt Knutsson sent the screenshots to Meta. Meta investigated and confirmed it removed the flagged accounts and ads for violating its impersonation policies. Meta also says it removed more than 179 million accounts, Pages and Groups for misrepresenting identity in the first half of 2026, most before anyone reported them, and more than 17.3 million Facebook and Instagram accounts linked to criminal scam centers since 2025.
“The tactics give victims a false sense of safety and security.” — FBI, in its July 20 public service announcement
The FBI has been warning about this for some time. Its July 20, 2026 public service announcement updated an earlier alert and describes what it calls “recovery” or “double-dip” scams, in which criminals pose as FBI staff or IC3 to re-victimize people. Contact arrives by phone, email, social media and online forums. In one version, a victim tells the original scammers they plan to report the crime and is steered to a fake “agent” or a link that may carry malicious code or harvest more financial data. In another, AI-generated deepfake videos show a senior FBI official urging victims to file complaints at a fake IC3 site. The FBI describes it as a single-step form asking for name, phone, email, scam type and estimated loss, with other links simply returning to the home page. The FBI says IC3 has no official social media accounts and does not initiate contact through messaging apps. It never charges victims to recover money and never refers them to paid recovery companies. Meta has also said it worked with researchers at Graphika to identify websites impersonating IC3, then blocked the sites and removed connected accounts.
Credit is due where it is earned. Meta acted once the screenshots reached it, and the company says most impersonators come down before anyone reports them. Policing millions of accounts is a hard job, and no platform will catch everything. But the pattern here deserves scrutiny. A page calling itself a director of fraud investigations and invoking a federal agency stayed up long enough for a reader to find it, screenshot it and send it to a columnist. That is a platform profiting from advertising while the burden of detection falls on ordinary users, many of them already wounded financially. The practical lesson is old-fashioned common sense. No legitimate service can guarantee recovery of stolen money. Anyone who demands an upfront fee, asks for a wallet recovery phrase or contacts you first through Messenger is not the government. Personal vigilance remains the strongest defense, because no federal agency can protect people who hand their information to a stranger using its name.
The FBI’s warning makes one distinction that matters: reporting a crime and recovering money are different things. IC3 collects complaints at ic3.gov so investigators can spot patterns and pursue criminals. It is not a service that sends refunds, and it does not recover funds through Messenger or Telegram. Victims 60 and older who need help filing can call the Department of Justice Elder Justice Hotline at 1-833-FRAUD-11 (833-372-8311). Anyone who encounters a suspicious approach should stop communicating with the sender, send no money or personal information, and report it to IC3. Saving screenshots, page addresses and messages before blocking an account gives investigators something to work with.
Think of the lifeguard who turns out to be a stranger in a borrowed whistle. You are already struggling in the water, you are grateful for any hand, and that is exactly why the impostor shows up then. Scammers do not need to be clever when they can be well timed. They find people on their worst day and offer hope for a fee. The defense is unglamorous and free: slow down, verify who is really contacting you, and remember that real agencies do not slide into your Messenger inbox. If someone promises to get your money back, the only thing they are likely to retrieve is the rest of it.