Active threat
Category hub
Impersonation scam alerts
Impersonation is the connective tissue of modern fraud — fake Coinbase support, fake IRS callers, fake Elon Musk giveaway accounts, fake bank security teams. The FTC logged it as the #1 reported scam category two years running.
Last updated · sorted newest first
Go deeper on this topic
Weekly digests move fast — jump into the evergreen hubs and guides for the full playbook, red flags, and reporting steps.
What this is
Impersonation fraud is any scheme in which the perpetrator falsely represents themselves as a trusted person, brand, government agency, or platform to extract money, credentials, or remote-access from the victim.
Red flags to watch for
- Unsolicited call/DM/email claims to be from 'Microsoft', 'Coinbase', 'Apple', the IRS, your bank, or a federal agency
- Urgent threat: account will be closed, warrant will issue, suspicious login detected — act in the next 10 minutes
- Asks you to install AnyDesk, TeamViewer, or to read out a one-time code 'to verify'
- Caller ID or sender email is spoofed to look official; replied-to address is a free webmail
- Celebrity-handle giveaway requires you to 'send to verify' an address — no real giveaway works this way
Live cases from the GACS feed
Loading current cases…
What to do if you've been targeted
- 1
End the call without engaging
Hang up. Do not press 1, do not 'verify' anything, do not let them direct you to a website.
- 2
Verify through an independent channel
Look up the organisation's number yourself and call back. Real fraud departments will confirm or deny within seconds.
- 3
Lock affected accounts
If you shared a code or credentials, change passwords, revoke active sessions, and enable hardware-key 2FA on the affected account.
- 4
Report the impersonator
File at reportfraud.ftc.gov (US), Action Fraud (UK), or your national regulator. Report the impersonating handle on the platform itself.
- 5
Save the actor to Shield
Add the phone number, handle, and any wallets to your GACS Shield watchlist for cross-report alerts.
FAQs
How can I verify a call really is from my bank?
Hang up. Call the number printed on the back of your card or your bank's official website — never a number the caller gave you. Real banks expect this and never penalise you for verifying.
Why do scammers ask for gift cards?
Gift-card balances are instantly transferable to international resellers and untraceable once redeemed. No legitimate government agency, employer, or utility ever accepts payment in iTunes, Steam, or Google Play cards.
Can deepfakes really clone someone's voice?
Yes. With 30 seconds of audio (a podcast, voicemail, or TikTok) attackers can produce convincing voice clones for 'grandparent scams' and CEO-fraud calls. Always verify via a callback to a known number.
How do I report a scam to GACS?
Submit the wallet address, website, phone number, or social handle at gacs.app. Each report is cross-checked against CryptoScamDB, URLhaus, and on-chain analysis before publication. Activate your free GACS Shield to monitor follow-on activity tied to the same actor.
Is the GACS Shield really free?
Yes. Activating your free Shield gives you unlimited scans, saved history, weekly alerts, and a watchlist — no card, no trial. There is no paid scanner tier.
Related scam profiles & guides
Activate your free GACS Shield
Save scammer handles, wallets, and domains. Get alerted when the same actor surfaces in a new report. Unlimited scans, no card.
Get My Free Scam AlertsAuthoritative sources
Independent primary sources used to check and corroborate the guidance on this page.
- US IdentityTheft.gov (FTC)
Official recovery plans for identity theft victims.
- CISA — Phishing Guidance
US cyber agency guidance on phishing and credential theft.
- UK National Cyber Security Centre
NCSC advice on suspicious emails, texts and account takeover.
