Scammers are running Facebook advertisements and profiles that impersonate FBI fraud investigators and stolen-asset recovery firms, targeting people who have already lost money to online fraud, according to findings reported by tech columnist Kurt “CyberGuy” Knutsson and confirmed by Meta.
The scheme came to light after a reader identified as Patrick K. shared screenshots of suspicious ads and profiles with the CyberGuy team, which then brought the examples to Meta. The company reviewed the material and confirmed it had removed the flagged accounts and advertisements for violating its impersonation policies.
One advertisement, displayed under the name Adam Molina, used branding reading “DARKTRACER” and asked viewers if they had lost assets or funds to scammers, offering to recover stolen cryptocurrency through a Facebook Messenger link. A second example was a Facebook page titled “Director of Fraud Investigations” under the name Grace K., using cover imagery of the White House and the FBI’s J. Edgar Hoover Building alongside references to the Internet Crime Complaint Center, or IC3, and the Department of Justice. The page claimed victims who lost more than $4,000 might qualify for federal review — a threshold not found in any published FBI guidance.
The FBI has stated plainly that IC3 has no official social media presence and never investigates crimes or recovers stolen funds through Facebook Messenger or Telegram. Any page claiming otherwise should be treated as suspicious regardless of how official its graphics appear.
Scale of the Problem
Meta told CyberGuy it removed more than 179 million accounts, Pages and Groups for misrepresenting identity in the first half of 2026 alone, most before any user reports came in. Since 2025, the company says it has removed more than 17.3 million Facebook and Instagram accounts tied to criminal scam centers. Meta has previously worked with cybersecurity researchers at Graphika to take down fraudulent websites impersonating IC3.
On July 20, 2026, the FBI issued an updated public warning describing how criminals build fake profiles that appear connected to the bureau, then approach people who have already reported losing money to scams. In documented cases, a victim who threatens to report fraud to the FBI is later contacted by someone posing as an agent through Facebook Messenger. The conversation often moves to Telegram, where the impersonator sends a link tied to a supposed IC3 complaint — a link that may contain malicious code or harvest additional financial information. The bureau also warned of AI-generated videos impersonating federal officials that direct victims to fake IC3 websites.
A separate FBI warning issued September 17, 2026, reported nearly 61,000 complaints involving law enforcement or government impersonation scams between January 2025 and July 2026, with reported losses exceeding $1.6 billion. That figure covers government impersonation scams broadly, not recovery fraud specifically, but it illustrates the scale of losses tied to fake-authority schemes.
How the Fraud Works
The Federal Trade Commission warned in August 2026 that recovery scammers sometimes buy lists of people who previously lost money to fraud, then use those details — including approximate loss amounts — to make their pitches sound credible. After establishing trust, the scammer typically introduces a fee, describing it as a processing charge needed to release recovered funds. The promised refund never materializes. The FBI has stated that IC3 never charges victims to recover stolen money.
What to Watch For
- Any promise of guaranteed recovery of stolen funds or cryptocurrency warrants suspicion — no legitimate service can guarantee results.
- Requests for upfront
