The FBI describes a scam that chains a fake tech-support call, a fake bank fraud department and a fake government agent to persuade victims, often older adults, to move savings into a ‘safe’ account. Knowing the sequence and refusing unsolicited remote access stops it early.
\nThe FBI’s Phantom Hacker PSA describes an evolution of tech support scams that layers imposter tech support, financial institution and government personas. Between January and June 2023, IC3 received 19,000 tech support scam complaints with estimated losses over $542 million; almost 50% of victims were over 60 and they accounted for 66% of losses.
\nIn phase one, a fake support representative gets the victim to install software that allows remote access, pretends to find a hack, and has the victim open financial accounts to see which is most lucrative. In phase two, a fake bank representative says a foreign hacker accessed the accounts and directs transfers to a ‘safe’ third-party account by wire, cash or cryptocurrency, and tells the victim not to say why. A fake government employee may follow with official-looking letters.
\nThe FBI advises not to call numbers from pop-ups, texts or emails, not to download software or give control of a computer to an unknown person who contacted you, and notes that the US Government will never request money by wire to foreign accounts, cryptocurrency or gift cards. Victims should report to their local FBI field office and IC3, including account numbers that received funds.
\nUse this for awareness training, customer communications and help-desk scripts. The figures are from the FBI’s 2023 announcement; current loss data may differ.
\nDSE recommends telling staff and customers, in writing, that your support team never cold-calls to request remote access or to move money. Publish the one phone number and portal people should use to reach real support, train help-desk staff to treat a caller describing this sequence as an active fraud case, and encourage employees to share the warning with older relatives.
\nCheck that the support contact statement appears in onboarding material, invoices and the customer portal, and include a phantom-hacker scenario in the next awareness exercise. Track reports of impersonation calls using your company name and review them quarterly.
\nFBI Internet Crime Complaint Center — “Phantom Hacker” Scams Target Senior Citizens (PSA230929). Reviewed October 18, 2026.
", "content_text": "The FBI describes a scam that chains a fake tech-support call, a fake bank fraud department and a fake government agent to persuade victims, often older adults, to move savings into a ‘safe’ account. Knowing the sequence and refusing unsolicited remote access stops it early.\nSource facts\nThe FBI’s Phantom Hacker PSA describes an evolution of tech support scams that layers imposter tech support, financial institution and government personas. Between January and June 2023, IC3 received 19,000 tech support scam complaints with estimated losses over $542 million; almost 50% of victims were over 60 and they accounted for 66% of losses.\nIn phase one, a fake support representative gets the victim to install software that allows remote access, pretends to find a hack, and has the victim open financial accounts to see which is most lucrative. In phase two, a fake bank representative says a foreign hacker accessed the accounts and directs transfers to a ‘safe’ third-party account by wire, cash or cryptocurrency, and tells the victim not to say why. A fake government employee may follow with official-looking letters.\nThe FBI advises not to call numbers from pop-ups, texts or emails, not to download software or give control of a computer to an unknown person who contacted you, and notes that the US Government will never request money by wire to foreign accounts, cryptocurrency or gift cards. Victims should report to their local FBI field office and IC3, including account numbers that received funds.\nApplicability\nUse this for awareness training, customer communications and help-desk scripts. The figures are from the FBI’s 2023 announcement; current loss data may differ.\nDSE recommendation\nDSE recommends telling staff and customers, in writing, that your support team never cold-calls to request remote access or to move money. Publish the one phone number and portal people should use to reach real support, train help-desk staff to treat a caller describing this sequence as an active fraud case, and encourage employees to share the warning with older relatives.\nVerification\nCheck that the support contact statement appears in onboarding material, invoices and the customer portal, and include a phantom-hacker scenario in the next awareness exercise. Track reports of impersonation calls using your company name and review them quarterly.\nOfficial reference\nFBI Internet Crime Complaint Center — “Phantom Hacker” Scams Target Senior Citizens (PSA230929). Reviewed October 18, 2026.", "content_markdown": "The FBI describes a scam that chains a fake tech-support call, a fake bank fraud department and a fake government agent to persuade victims, often older adults, to move savings into a ‘safe’ account. Knowing the sequence and refusing unsolicited remote access stops it early.\n\n## Source facts\n\nThe FBI’s [Phantom Hacker PSA](https://www.ic3.gov/PSA/2023/PSA230929) describes an evolution of tech support scams that layers imposter tech support, financial institution and government personas. Between January and June 2023, IC3 received 19,000 tech support scam complaints with estimated losses over $542 million; almost 50% of victims were over 60 and they accounted for 66% of losses.\n\nIn phase one, a fake support representative gets the victim to install software that allows remote access, pretends to find a hack, and has the victim open financial accounts to see which is most lucrative. In phase two, a fake bank representative says a foreign hacker accessed the accounts and directs transfers to a ‘safe’ third-party account by wire, cash or cryptocurrency, and tells the victim not to say why. A fake government employee may follow with official-looking letters.\n\nThe FBI advises not to call numbers from pop-ups, texts or emails, not to download software or give control of a computer to an unknown person who contacted you, and notes that the US Government will never request money by wire to foreign accounts, cryptocurrency or gift cards. Victims should report to their local FBI field office and IC3, including account numbers that received funds.\n\n## Applicability\n\nUse this for awareness training, customer communications and help-desk scripts. The figures are from the FBI’s 2023 announcement; current loss data may differ.\n\n## DSE recommendation\n\nDSE recommends telling staff and customers, in writing, that your support team never cold-calls to request remote access or to move money. Publish the one phone number and portal people should use to reach real support, train help-desk staff to treat a caller describing this sequence as an active fraud case, and encourage employees to share the warning with older relatives.\n\n## Verification\n\nCheck that the support contact statement appears in onboarding material, invoices and the customer portal, and include a phantom-hacker scenario in the next awareness exercise. Track reports of impersonation calls using your company name and review them quarterly.\n\n## Official reference\n\n[FBI Internet Crime Complaint Center — “Phantom Hacker” Scams Target Senior Citizens (PSA230929)](https://www.ic3.gov/PSA/2023/PSA230929). Reviewed October 18, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/", "url": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-18" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Recognize the three-phase “phantom hacker” scam before a fake tech-support call empties an account", "item": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/#article", "identifier": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/", "url": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/", "headline": "Recognize the three-phase “phantom hacker” scam before a fake tech-support call empties an account", "description": "The FBI describes a scam that chains a fake tech-support call, a fake bank fraud department and a fake government agent to persuade victims, often…", "abstract": "The FBI describes a scam that chains a fake tech-support call, a fake bank fraud department and a fake government agent to persuade victims, often older adults, to move savings into a ‘safe’ account. Knowing the sequence and refusing unsolicited remote access stops it early.", "articleBody": "The FBI describes a scam that chains a fake tech-support call, a fake bank fraud department and a fake government agent to persuade victims, often older adults, to move savings into a ‘safe’ account. Knowing the sequence and refusing unsolicited remote access stops it early.\nSource facts\nThe FBI’s Phantom Hacker PSA describes an evolution of tech support scams that layers imposter tech support, financial institution and government personas. Between January and June 2023, IC3 received 19,000 tech support scam complaints with estimated losses over $542 million; almost 50% of victims were over 60 and they accounted for 66% of losses.\nIn phase one, a fake support representative gets the victim to install software that allows remote access, pretends to find a hack, and has the victim open financial accounts to see which is most lucrative. In phase two, a fake bank representative says a foreign hacker accessed the accounts and directs transfers to a ‘safe’ third-party account by wire, cash or cryptocurrency, and tells the victim not to say why. A fake government employee may follow with official-looking letters.\nThe FBI advises not to call numbers from pop-ups, texts or emails, not to download software or give control of a computer to an unknown person who contacted you, and notes that the US Government will never request money by wire to foreign accounts, cryptocurrency or gift cards. Victims should report to their local FBI field office and IC3, including account numbers that received funds.\nApplicability\nUse this for awareness training, customer communications and help-desk scripts. The figures are from the FBI’s 2023 announcement; current loss data may differ.\nDSE recommendation\nDSE recommends telling staff and customers, in writing, that your support team never cold-calls to request remote access or to move money. Publish the one phone number and portal people should use to reach real support, train help-desk staff to treat a caller describing this sequence as an active fraud case, and encourage employees to share the warning with older relatives.\nVerification\nCheck that the support contact statement appears in onboarding material, invoices and the customer portal, and include a phantom-hacker scenario in the next awareness exercise. Track reports of impersonation calls using your company name and review them quarterly.\nOfficial reference\nFBI Internet Crime Complaint Center — “Phantom Hacker” Scams Target Senior Citizens (PSA230929). Reviewed October 18, 2026.", "datePublished": "2026-10-18T21:00:43+00:00", "dateModified": "2026-10-18T22:22:07+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/phantom-hacker-tech-support-bank-government-imposter-scam/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Recognize the three-phase “phantom hacker” scam before a fake tech-support call empties an account" }, "articleSection": [ "Cybersecurity" ], "keywords": [ "Cybersecurity", "Explainer", "Advisory priority" ], "genre": "Explainer", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" } ], "wordCount": 382, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "FBI Internet Crime Complaint Center — “Phantom Hacker” Scams Target Senior Citizens (PSA230929)", "url": "https://www.ic3.gov/PSA/2023/PSA230929" } } ] } }