How to respond to impersonation scams | Cyber Justice Law Group

What are some impersonation scam red flags?

The best protection is not memorizing every scam script. It is learning the recurring signals that cut across all of them.

Universal red flags	Crypto-specific red flags
Unsolicited contact paired with urgency.	A support agent asking you to move crypto to a new wallet "for safety."
Threats of arrest, account loss, or immediate financial harm, including to your credit score.	Any request for your seed phrase, private key, or two-factor authentication.
Pressure to keep the matter secret from family, coworkers, or advisors.	Unsolicited tokens appearing in your wallet history.
Requests for gift cards, wire transfers, cryptocurrency, or Bitcoin ATM deposits.	A celebrity, influencer, or public figure asking you to send crypto first.
Requests for remote access, screen sharing, or software downloads.	A government or bank caller directing you to a Bitcoin ATM with a QR code.
Email addresses, URLs, or caller IDs that look close to the real thing but not exactly right.

What should you do if you've been scammed?

If you have already sent money or crypto, the most important thing is to move quickly and stop the damage from expanding. Falling for an impersonation scam is not a sign of naivete. These operations are engineered by organized criminal networks using professional scripts, stolen data, and increasingly advanced AI tools.

Start here:

Stop communicating with the scammer. Hang up the phone, leave the chat, and stop responding to messages.
Contact your bank, exchange, or payment provider immediately. If a transfer is still pending, there may still be time to freeze, flag, or intercept it.
Secure your accounts. Change passwords, revoke sessions, lock accounts, rotate 2FA, and remove any remote-access software if the scammer had access to your device.
Preserve evidence. Save screenshots, wallet addresses, transaction hashes, call logs, email headers, profile links, QR codes, and the timeline of what happened.
Report the fraud. File complaints with the FTC at ReportFraud.ftc.gov, the FBI at ic3.gov, your state attorney general, relevant exchanges, and local law enforcement.
Place fraud alerts if personal data was exposed. Contact Equifax, Experian, and TransUnion.

If crypto was involved, do not assume that "irreversible" means "untraceable." Blockchain records often make the flow of funds easier to trace than victims realize. According to TRM Labs' summary of the FBI data, the FBI's Recovery Asset Team froze $561 million in fraudulently obtained funds in 2024 and achieved a 66% success rate through the Financial Fraud Kill Chain process. Speed matters because the longer the funds circulate, the harder they become to freeze before laundering.

What is the legal landscape for impersonation scams?

The legal framework is evolving because regulators recognize that impersonation fraud is not just misleading marketing. It is a repeatable, large-scale method of economic harm.

The most important recent development is the FTC's Government and Business Impersonation Rule, which took effect in 2024. The rule prohibits conduct such as falsely implying affiliation with a government agency or business, using official seals or logos deceptively, and spoofing digital identifiers to create a false association. It also gives the FTC stronger power to seek refunds and civil penalties, which the agency has said can reach $53,088 per violation.

Since the rule took effect, the FTC has brought multiple cases and shut down more than 13 impersonation websites. The agency has also proposed expanding the rule to cover individual impersonation and potentially hold AI platform providers liable when they knowingly enable impersonation fraud. The FTC's 2024 proposal on AI impersonation protections is an important sign of where enforcement may go next.

State and international developments also matter:

Tennessee's ELVIS Act is one of the first laws to explicitly treat a person's voice as protected property in the AI era.
California maintains a public Crypto Scam Tracker that helps expose impersonation schemes and wallet drainer patterns.
International operations led by agencies such as Europol and the FBI's overseas partners have intercepted thousands of impersonation calls and made hundreds of arrests tied to call-center fraud.

Crypto remains a double-edged sword in this legal environment. Its speed and finality make it attractive to scammers, but its public ledger can also create evidentiary trails. Chainalysis noted record seizures and recoveries in 2025, a reminder that digital assets do not disappear just because they move quickly.

How a crypto fraud attorney can help

In the right case, legal counsel can help with:

Blockchain tracing to identify where stolen funds landed.
Preservation demands and legal notices to exchanges or custodians.
Investigation into whether a platform ignored obvious red flags or security failures.
Coordination with law enforcement and regulators.
Civil claims against negligent intermediaries where the facts support them.

Victims should also be alert to one more trap: recovery scams. If someone contacts you out of the blue claiming they can "hack back" the funds, recover the assets for an upfront fee, or guarantee results, that is almost certainly another fraud. The FBI explicitly warns against upfront-fee crypto recovery services.

If you are in need of a crypto recovery lawyer you can verify, contact CyberJustice Law Group for a free video consultation to evaluate your recovery options. We provide bar licenses, social profiles, and court dockets for your review. We also don't take a dime without a thorough case assessment.

Victims of impersonation scams have more recovery pathways today than they did even a few years ago. A licensed, verifiable, U.S.-based crypto recovery lawyer can sometimes help. Do your homework before hiring, and reach out to learn if your case is eligible for recovery.

FAQ

How do I know if I'm being scammed?

If the person contacting you is creating urgency, resisting verification, or pushing you toward a transfer before you have time to think, treat that as evidence of a scam, not just a reason to be cautious. Before sending money or sharing credentials, end the conversation and verify through a known channel, use a family code word for emergencies, check the full crypto address instead of trusting truncated wallet displays, enable strong account security like hardware-based 2FA and withdrawal allow-listing, and treat pressure itself as a red flag. No legitimate bank, exchange, government agency, or family member in real trouble will object to independent verification.

What should I do if I already sent cryptocurrency to a scammer?

Stop communicating with the scammer, contact the exchange or platform you used immediately, lock down your accounts, and preserve every piece of evidence you have, including wallet addresses, transaction hashes, screenshots, and call logs. Then report the scam to the FTC, the FBI IC3, and any exchange or wallet provider involved. Time matters because stolen funds become harder to freeze as they move.

Can money be recovered after an impersonation scam?

Sometimes, yes, but it depends on the payment method, the speed of the response, and where the funds were sent. Wire transfers and card payments may sometimes be frozen or disputed if caught quickly. Cryptocurrency is harder to recover, but blockchain tracing, exchange notices, and legal action can still matter in the right case. Victims should act immediately and avoid anyone promising guaranteed recovery for an upfront fee.

How do I report an impersonation scam?

Report the scam to the platform or institution being impersonated, your bank or exchange, the FTC at ReportFraud.ftc.gov, the FBI at ic3.gov, your state attorney general, and local law enforcement. Include all identifiers you have, such as phone numbers, email addresses, usernames, wallet addresses, transaction hashes, and screenshots of the messages.

Should I hire a lawyer after an impersonation scam?

In many cases it is worth speaking with a crypto fraud or recovery attorney. They can help with blockchain tracing, preservation demands to exchanges, coordination with law enforcement, and civil claims where the facts support them. Be wary of anyone who contacts you first offering to recover funds for an upfront fee—that is often a recovery scam. A legitimate lawyer will verify through your state bar, provide a real consultation, and not guarantee results before reviewing your case.