How to Spot and Avoid Impersonation Scams
Fraudsters are finding new ways to impersonate people and organizations you trust. Learn the warning signs and simple steps to protect your money and personal information.
Share
Takeaways
- Impersonation scams happen when criminals pretend to be someone you trust, such as a financial institution, government agency, delivery company or family member.
- Scammers often create urgency, fear, empathy or excitement to pressure people into acting before they have time to think.
- Never share passwords, one-time passcodes, login credentials or personal information unless you've independently verified who you're communicating with.
- If something feels suspicious, stop communicating, verify the request through a trusted source and report it.
Remember
Legitimate organizations want you to make informed decisions. Scammers want you to act immediately. If a message creates urgency, asks for secrecy, requests personal information or tells you to move money, pause and verify before responding.
Fraudsters are constantly changing their tactics, and one of the fastest-growing threats today is the impersonation scam. These scams succeed because they exploit something we all rely on: trust. Criminals pretend to be someone you know or an organization you recognize — such as your financial institution, a government agency, a delivery service or even a family member — to convince you to share information, send money or take actions that put your finances and personal information at risk.
In 2025 alone, consumers reported losing nearly $3.5 billion to impersonation scams, making them one of the most costly types of fraud. The good news? Knowing what to look for can help you avoid becoming a victim.
What is an impersonation scam?
An impersonation scam happens when a fraudster pretends to be a trusted person, company or agency to trick you into taking action. Their goal may be to:
- Steal your personal or financial information.
- Gain access to your online accounts.
- Convince you to send money.
- Get you to install software or grant access to your computer or device.
Reports of scams starting with a text or email have been on the rise in recent years, but there are many ways scammers may contact you, including by phone, text, email, social media, messaging apps or dating apps.
Common impersonation scams
Scammers often pose as:
- Financial institutions or payment providers
- Government agencies, including the IRS or Social Security Administration
- Law enforcement
- Delivery and shipping companies
- Tech support representatives
- Charities
- Lottery or giveaway organizations
- Funeral homes or burial services
- Family members or loved ones in distress
You may hear messages such as:
- “Your account has suspicious activity.”
- “Your grandchild is in trouble and needs help.”
- “There is a warrant for your arrest unless you pay immediately.”
- “Your package can't be delivered until you confirm your information.”
- “Your device has been hacked, but we can fix it.”
While the stories may vary, the goal is usually the same: to pressure you into acting before you have time to think or verify the request.
Red flags to watch for
They create a sense of urgency: Scammers want you to act quickly before you can verify what they're telling you. Be suspicious of anyone demanding immediate action.
They threaten consequences: Claims about arrests, fines, account closures or other penalties are designed to create fear and pressure you into complying.
They ask for secrecy: A scammer may tell you not to discuss the situation with family, friends or your financial institution. Legitimate organizations don't ask you to keep important matters secret.
They ask for information they should already have: Be cautious if someone claiming to represent an organization asks for information they would already know, such as your address, account details or personal information.
They ask you to move money: One of the biggest red flags is being told to transfer your money to a “safe” account. Legitimate financial institutions will never ask you to move funds to protect them from fraud.
How to protect yourself
- Keep sensitive information private: Never share passwords, one-time passcodes, login credentials or personal identifying information unless you've independently verified who you're communicating with.
- Verify before you trust: If you receive an unexpected call, text or email, contact the organization directly using a phone number or website you know is legitimate. Don't use contact information provided in the suspicious message.
- Be cautious with sending payments: Only send money to people you know and trust. Take extra caution with requests to verify legitimacy before authorizing payments.
- Strengthen your account security: Use multi-factor authentication whenever available and keep your devices, operating systems and security software updated.
- Think before you click: Before selecting a link in an email, text or message, verify where it leads. If you're unsure, visit the organization's website directly.
- Be mindful of what you share online: Details such as birthdays, travel plans, family relationships and other personal information can help scammers make their messages seem more convincing.
Hear tips from the Federal Trade Commission on how to stay safe against impersonation scams
Use BECU tools to help protect your accounts
BECU offers several tools that can help you stay informed about activity on your accounts. Consider taking advantage of:
- Online and Mobile Banking to regularly review account activity.
- Account Alerts to monitor account activity.
- Push notifications so you receive alerts in real time.
- Debit and credit card fraud alerts to identify potential unauthorized activity.
- Digital card controls that allow you to manage your debit card, including temporarily pausing it when needed.
- The sooner you spot unusual activity, the sooner you can take action.
What to do if you think you've been targeted
- Stop communicating with the scammer.
- Do not send money or provide additional information.
- Change any passwords or login credentials you may have shared. Contact us immediately.
- Monitor your accounts for unauthorized activity.
- Report the incident to the Federal Trade Commission and local law enforcement.
- Notify the legitimate organization being impersonated.
Trust your instincts
Scammers rely on urgency, fear and trust to succeed. When something feels unusual, take a step back and verify before responding. A few moments of caution can help protect your money, your personal information and your peace of mind.
For more fraud prevention tips and resources, visit BECU's Fraud and Security Center.
The above article is intended to provide generalized financial information designed to educate a broad segment of the public; it does not give personalized financial, tax, investment, legal, or other business and professional advice. Before taking any action, you should always seek the assistance of a professional who knows your particular situation when making financial, legal, tax, investment, or any other business and professional decisions that affect you and/or your business.