The Ultimate Guide to Impersonation Scams

What are impersonation scams?

Impersonation scams are schemes where a criminal extracts information or assests from a victim by pretending to be someone the victim already trusts, or feels conditioned to obey. The impersonated identity could be a government agency, a bank, a crypto exchange, a family member, a celebrity, a police officer, or a financial professional. The scammer's goal is to gain access to the victim's fiat currency, cryptocurrency, online accounts, or sensitive personal details.

According to some sources, this is the fastest growing category of digital fraud. The FTC reported that imposter scams were the single most reported fraud category in 2024, with consumers reporting $2.95 billion in losses. Chainalysis estimates that crypto impersonation scams grew 1,400% year over year in 2025.

Why are impersonation scams growing so fast?

Two technologies sit at the center of impersonation scamming's meteoric rise: AI and crypto. Cryptocurrency makes many victim's payments untraceable, anonymous, and irreversible. AI is a force multiplier for scammers' operational efficiency and impersonation tactics. The technologies also work in tandem, with many scammers in China and Southeast Asia purchasing scam-specific AI products using cryptocurrencies to obscure the identity of buyer and seller.

This technological revolution is in part why impersonation scams now sit at the center of modern fraud. Scammers now have easy access to unprecedented deception techniques combined with an unregulated financial system. By stacking the resources available to them, it is easier than ever for organized criminals, or individual actors, to build a highly sophisticated system for extracting victims' assets.

How do impersonation scams work?

Every impersonation scam looks different on the surface, but the underlying mechanics are remarkably consistent. Whether the scammer claims to be the IRS, Coinbase, Amazon, or your granddaughter, the playbook has four predictable stages.

Stage 1: Identity fabrication

The scammer's first task is to suspend disbelief -- to make the fake identity feel familiar and genuine. That can mean spoofed caller ID, an email domain that looks just official enough, a fake support page, or a social media profile using AI-generated photos. As Scamwatch and Group-IB both note, modern impersonation campaigns routinely use message-thread spoofing, fake profiles, phishing pages, and official-looking branding to lower suspicion immediately.

Stage 2: Trust exploitation

Once they've forged the fake identity, the scammer borrows that person or organization's authority, familiarity, or expertise. A scammer may impersonate a government employee threatening arrest. A bank impersonator may warn the victim their accounts are under attack and must be handed over. Some scammers use voice cloning to impersonate family members in need of funds to resolve a medical emergency.

Stage 3: Urgency and isolation

Impersonation scams work best when the victim has no time to think and no one to consult. The FTC and OCC both warn that scammers create immediate consequences, such as arrest, frozen accounts, hacked wallets, missed jury duty, or a family emergency, and then demand secrecy. If the victim hangs up, calls a relative, logs into the real app, or asks an outside professional, the scam becomes much easier to detect. So the scammer keeps the victim in the spin cycle by telling them there's no time to verify their identity.

Stage 4: Payment extraction

The final stage is the conversion event. The scammer needs money, credentials, or both to resolve the problem they've invented. In older schemes that often meant wire transfers, gift cards, or mailed cash. Today, the preferred form of payment is often cryptocurrency. The FTC's crypto scam guidance specifically warns that impersonation scammers now routinely walk victims through buying crypto and sending it to a wallet "for safe keeping."

Why impersonation scammers prefer crypto

Crypto is attractive to scammers for four reasons: it is fast, difficult to reverse, globally accessible, and anonymous enough to frustrate victims attempting to tracer their funds. The FBI's 2024 IC3 data showed 10,956 crypto ATM complaints and $246.7 million in losses, a sign that criminals are targeting non-technical victims with a payment method many still do not fully understand.

If there is one principle to remember as you read the rest of this guide, it is this: every impersonation scam is a trust attack first and a payment attack second. These schemes exploit their victims by convincing them the money is safer in the scammer's hands.