What to do if you are scammed
Protect yourself from online scams - what to do if you've fallen victim

Protect Yourself from Online Scams – What to Do If You’ve Fallen Victim
Online scams are evolving rapidly, and even the most cautious people can fall victim. Criminals now use artificial intelligence, spoofed phone numbers, and fake websites to trick users into sending money or handing over personal information. If you’ve been targeted, the most important step is to act quickly and report it.
In the United States, victims should report online scams to the Internet Crime Complaint Center (IC3) at www.ic3.gov. This FBI program works with the National White Collar Crime Center and the Bureau of Justice Assistance to track and respond to internet-facilitated crime.
Another important resource is the Federal Trade Commission (FTC) at reportfraud.ftc.gov. The FTC accepts consumer complaints and provides detailed guidance on how to protect yourself from further harm.
Latest Scams in 2025
AI-Powered Phishing Attacks
The FBI has reported a rise in AI-driven phishing emails that are more convincing than traditional scams. These emails often mimic your actual writing style or reference recent purchases, travel, or communications, making them appear highly personal and trustworthy. Because they are tailored by artificial intelligence, they can slip past spam filters and trick even savvy users into clicking links or sharing sensitive data.
Google Breach-Related Phishing & Vishing
After the recent Google Salesforce server breach, cybercriminals are exploiting the incident to frighten users into handing over login credentials. Victims may receive emails warning that their Gmail or Google accounts are at risk, followed by phone calls from spoofed “650” (California) numbers pretending to be Google support. These scams combine phishing (email) and vishing (voice calls) to appear more credible.
Romance & “Pig Butchering” Scams
Romance scams remain one of the most emotionally devastating frauds, where scammers build trust and emotional intimacy online before requesting money. A growing variant is known as “pig butchering”—a term taken from a Chinese phrase meaning “fattening the pig before slaughter.” In these schemes, criminals spend weeks or months grooming their victims, gaining trust through daily conversations and fake relationships, before pushing them into fraudulent cryptocurrency or investment platforms. Victims are led to believe they are making profitable investments until the scammer disappears with all of their funds.
Government & Official Impersonation
The FBI warns of vishing and smishing scams in which criminals impersonate senior government officials or law enforcement officers. Using spoofed caller IDs and even AI-generated voices, scammers threaten victims with arrest, fines, or frozen benefits if they do not comply immediately. Because the calls or texts sound so authentic, victims often panic and follow instructions without stopping to verify the source.
Toll & Package Delivery Text Scams
One of the largest scams currently targeting U.S. smartphone users involves fake toll violation or DMV text messages. The message typically claims the recipient has unpaid tolls, taxes, or parking violations, and that failure to pay will result in license suspension or legal action. Victims who click the link are directed to a fake payment page designed to steal credit card details. Similar tactics are also used with fraudulent UPS, FedEx, or Amazon “delivery” texts.
QR Code Scams (Brushing Technique)
Scammers are increasingly using QR codes to deliver malware or phishing links. In one scheme known as the “brushing technique,” criminals mail unsolicited packages containing QR codes, tricking recipients into scanning them out of curiosity. Once scanned, the codes may install malware, open fake login pages, or steal personal data. The FBI has also warned about Browser-in-the-Browser (BiTB) attacks, where QR codes lead to pop-ups that look like legitimate sign-in pages but are designed to capture your credentials.
Medusa Ransomware
The FBI is tracking the Medusa ransomware gang, which has been launching targeted phishing campaigns to compromise Gmail, Outlook, and corporate networks. Once access is gained, attackers encrypt files and demand ransoms ranging from $100,000 to millions of dollars. In addition to financial damage, these attacks often involve data theft, meaning sensitive personal or business information may be leaked or sold on the dark web even if the ransom is paid.
What to Do If You’ve Been Scammed
- Stop communication immediately. Don’t reply or send more money.
- Document everything. Save emails, texts, receipts, and screenshots.
- Report it. Use IC3, the FTC, and your state attorney general’s office.
- Notify your bank. Ask about reversing charges or freezing your accounts.
- Protect your identity. Place fraud alerts or freezes with Equifax, Experian, and TransUnion.
- Seek professional help. A private investigator can assist with scam verification, dark web searches, and evidence collection.
How Jennifer Cormack Consulting Can Help
At Jennifer Cormack Consulting, we specialize in fraud investigations and scam response. Whether you’ve been targeted by a romance scam, phishing attack, or a breach-related scheme, we can:
- Trace online activity and digital footprints
- Conduct dark web monitoring for compromised data
- Assist attorneys with litigation support and evidence gathering
👉 If you’ve fallen victim to an online scam, contact us today for a free consultation and take the first step toward recovery and protection.



