Scam guides › Phantom hacker / "move your money" scam
Phantom hacker scam: fake tech support, fake bank, fake government
Updated . By the AskBeforeYouSend editorial team (how we fact-check). Fact-checked against the official sources listed at the bottom.
Key facts
- From January to June 2023, IC3 got 19,000 tech support scam complaints with losses over $542 million. Almost half the victims were over 60, and they had 66% of the losses.
- The Federal Reserve says it will never contact the public by unsolicited calls or emails asking for money or personal information.
- Victims often lose entire bank, savings, retirement or investment accounts (FBI).
What it looks like
A made-up example based on the FBI's description of phase 3.
How the scam works
- Phase 1: a pop-up, call, text or email sends you to fake "tech support", who installs remote-access software and has you open your financial accounts.
- Phase 2: a fake bank or brokerage worker says hackers got in and you must move your money to a "safe" third-party account.
- Phase 3: a fake Federal Reserve or other government official "confirms" it, sometimes with an official-looking letter, and pushes you to keep moving money, sometimes over days or months.
Red flags
- Anyone telling you to move money to protect it
- A call from "the Federal Reserve"
- Being told not to tell your bank, family or anyone why
- A stranger asking you to open your bank accounts while they're connected to your computer
- Wires, cash, crypto or gift cards as the "fix"
What to do now
- Hang up. Don't let anyone who contacted you control your computer.
- Call your bank or brokerage using the number on your card or statement.
- Tell a family member or friend before moving any money.
- If money already left, call your bank right away to try to stop the wire.
- Report it to the FBI's IC3 and your local FBI field office.
Report it
Questions
Would the Federal Reserve ever call me?
The Federal Reserve says it will never contact the public with unsolicited phone calls or emails asking for money or personal information. A call like that is a scam.
My parent already moved money. What should we do?
Call their bank right away to try to stop or recall the transfer, then report it to IC3 at ic3.gov and the local FBI field office. Include names, phone numbers and the account numbers the money went to.
Sources
- FBI IC3 PSA: "Phantom Hacker" scams target senior citizens (Sep 29, 2023)
- FBI Phoenix: "The Phantom Hacker": FBI warns public of new financial scam
- Federal Reserve Board: Protect yourself from fraud and scams
- FTC: How to spot, avoid, and report tech support scams
Example messages are made up to show the pattern unless we say otherwise. Phone numbers in examples use the fictional 555 range.
Get next week's scam before it reaches you
One short email a week: the newest scam going around, a real example, the warning signs, and exactly what to do. Free, always. Plus a free printable Scam-Proof Fridge Sheet and Family Safety Checklist.