Impersonation

# what it is

An impersonation scam is a contact pretending to be a real institution. The most common impersonators:

• The IRS, "you owe back taxes, a warrant has been issued"
• Your bank's fraud department, "we noticed a suspicious charge"
• Social Security, "your number has been compromised"
• A courier (UPS / USPS / FedEx / DHL), "your package is held"
• A utility, "your power will be shut off in 30 minutes"
• A police department, "you missed a court date / there's a warrant"

The script almost always combines authority + urgency + an unusual payment request.

# how they reach you

The contact channel matters because each one comes with a built-in "verification" you can use against the operator.

• A cold phone call with spoofed caller ID matching the real institution's number. The most common channel. Phone networks make caller ID trivial to forge.
• A robocall that says "press 1 to speak to an agent" about a "suspended SSN", "warrant", or "tax case".
• An SMS / smishing message pretending to be your bank's fraud department, asking you to confirm a transaction or call a number.
• An email with the institution's logo (IRS letterhead, bank branding, "FBI Office of Inspector General") asking you to call or click. The sending domain is almost always wrong on close inspection.
• A voicemail from "Officer X with the Social Security Administration" or "Sergeant Y from the County Sheriff's office" with a callback number.
• A pop-up on a sketchy site ("Your bank has detected fraud, call this number") that pretends to be your bank.
• A physical mailer in the rare cases of "back taxes owed" letters that are professionally printed but route to a non-government number.
• A door-knock for fake "utility inspectors" or "tax collectors", much rarer, but it happens, especially against the elderly.

What they share: the contact came to you uninvited, the urgency is high, and resolution requires you to act now without hanging up to verify.

# how it works after the contact

1. The threat. A warrant, an account freeze, a shutoff, a missed court date, an arrest. Designed to put you in fight-or-flight before you can think.
2. The "verification". They want your full SSN, your date of birth, the last 4 of your card, your debit PIN, your one-time bank passcode, or your address. They already have part of it from prior leaks; they're filling in the rest.
3. The payment. Resolution requires a payment that is always one of these:
   • Gift cards (Apple, Target, eBay, Steam)
   • Wire transfer
   • Crypto (especially Bitcoin via "ATM" / kiosks)
   • Bank zelle / cashapp transfer
4. The handler. They keep you on the line. Don't hang up. Don't talk to anyone. Drive directly to the store.

# the keep-you-on-the-line tactic

Impersonation scams don't have an "off-platform pivot" the way social scams do, they don't need to move you, because there's no moderation pipeline reading the call. They have something operationally identical: they refuse to let you off the phone.

The "officer", "fraud agent", or "compliance officer" will insist you stay on the line continuously while you:

• Drive to a Walgreens, Target, Walmart, or grocery store
• Buy gift cards
• Read off the gift-card numbers and PINs
• Or initiate a wire transfer or visit a Bitcoin kiosk

The reason is the same as off-platform pivots in romance and employment scams. As long as you're on the line:

• You can't call the real institution back at the number on your bank card, the IRS website, or the utility's billing statement.
• You can't talk to a spouse, child, neighbor, or pharmacist who might break the spell.
• You can't Google the situation ("does Social Security suspend SSNs?", they don't, but you'd find that out in 10 seconds).
• You can't notice the script doesn't make sense until it's too late.

This isolation is the scam's most important feature. It is always safe to hang up. Real agencies and real banks expect you to verify by calling back the official number. If anyone gets angry or threatens you for hanging up to verify, that's the proof you needed.

# red flags

• Caller ID matches a real agency, but the agency itself never called you first.
• The caller insists you stay on the phone while you go somewhere, a store, an ATM, a Bitcoin kiosk. (See keep-you-on-the-line tactic above, this is the operational equivalent of the off-platform pivot in social scams.)
• They ask you not to tell anyone, "for the integrity of the investigation".
• Payment is by gift card, crypto, or wire to a stranger. Real institutions never accept these.
• The amount and urgency feel designed to provoke action, not deliberation.
• They get hostile or accusatory when questioned.
• A "warrant", "case number", or "badge number" is offered as proof. Both can be made up; neither verifies anything.

# the universal counter-move

You don't have to identify a specific scam. Just do this:

1. Hang up.
2. Look up the institution's official number yourself, back of your bank card, the IRS website, the utility's billing statement. Do not use the number the caller gave you. Do not call them back from your call history.
3. Call that number directly and ask if there's an issue with your account.

In 99% of cases, there is no issue. In the 1% there is, you can resolve it through normal channels with no urgency and no gift cards.

# institutional callouts

A few facts worth memorizing:

• The IRS initiates contact by physical mail, not phone. They never demand payment in gift cards, wire, or crypto.
• Social Security does not suspend your SSN. They cannot. There is no such mechanism.
• Your bank's fraud team will ask you to verify items on your statement. They will never ask you to send money to "secure" an account, transfer funds to a "safe" account, or read out your one-time passcode.
• USPS / UPS / FedEx / DHL texts about "held packages" requiring redelivery fees are nearly always smishing. Real notifications go to the tracking number you have on file from the order.
• Police and courts do not call about warrants. They show up.
• Utilities send written disconnection notices weeks in advance. They don't shut off power inside the hour.

# what to do if you already paid

• Stop talking to them. Block the number.
• Save everything. Call logs, the spoofed number, screenshots of texts, transaction receipts, gift-card numbers and PINs (you need these to dispute).
• Report and dispute.
  • Gift cards, call the issuer's fraud line immediately. Every hour matters; some issuers can claw back funds before they're spent. Apple, Target, Amazon, eBay, Google Play, Steam all have fraud lines.
  • Bank wire / Zelle / CashApp, call your bank, file a fraud claim, ask about recall.
  • Crypto, note the receiving wallet, report to Chainabuse and IC3.
  • All cases, file with IC3 (FBI) and FTC.
• Tell people who might be next. If they got your number, they can pivot to people in your contact list. A heads-up to family is worth more than they think.

# the rule

If they called you, treat the call as untrusted no matter who they say they are. Real institutions don't mind being hung up on and called back at the official number. Scammers always do.