Loading story…
A wave of impersonation scams is targeting individuals through phone calls and text messages, with fraudsters posing as debt collectors, tax agencies, law enforcement, and government departments. Victims report receiving unsolicited communications threatening legal action, arrest, or suspension of licenses unless immediate payment or personal information is provided. Tactics include aggressive language, urgent demands, and the use of official-sounding names or references to government codes to increase credibility. Notable examples include calls from entities like "Champion Strategy Holdings" and "Tax Solutions," as well as text messages purporting to be from the Florida Department of Highway Safety and Motor Vehicles (FLHSMV), all leveraging fear of legal consequences to coerce compliance.
Authorities and cybersecurity experts warn that legitimate agencies do not demand payment or sensitive information via unsolicited calls or texts, nor do they threaten arrest or license suspension without due process. Individuals are advised to verify any such claims through official channels, avoid clicking on suspicious links, and never provide personal or financial information in response to these threats. The prevalence and sophistication of these scams highlight the ongoing need for vigilance and public awareness to prevent financial loss and identity theft.
Get the infrastructure and lures behind it.
25 events from the most recent confirmed update back to the earliest known activity.
South Australia Police warned of an ongoing phone scam in which fraudsters spoof caller IDs to appear as legitimate local police stations, then pose as officers to claim investigations and pressure victims for money, cryptocurrency, gift cards, personal information, or remote-access app installation. SAPOL said police will not unexpectedly accuse people of crimes by phone, demand payment, request banking credentials or one-time passwords, or ask people to download external apps.
Online Threat Alerts warned of a tax-relief scam using the name 'Tax Resolution Enrollment Services' and the persona 'Elise Montgomery' to lure targets into calling 888-261-3296 and 771-247-4359. The scam falsely promises government-backed tax debt reduction or elimination and seeks to steal personal information or money through urgent claims and deceptive outreach.
Online Threat Alerts reported scam calls spoofing the Eden Police Department number 716-992-9211, with callers falsely claiming arrest warrants had been issued and attempting to obtain personal information. The warning said legitimate police do not demand money or threaten arrest over the phone and advised recipients to hang up and verify by calling the department directly.
Online Threat Alerts warned about scam calls and messages from a purported 'Office of Filing Resolution Services' claiming victims owed tax debt or qualified for tax relief programs. The scam used urgent, intimidating language to pressure targets into disclosing personal information or making immediate payments, while the alert noted that the IRS generally initiates contact by mail and advised reporting incidents to TIGTA and the IRS.
Online Threat Alerts warned of a tax impostor scam using the names 'American Tax Professionals,' 'American Tax Consultants,' and 'American Tax Services' in automated voicemail messages about old balances or missing returns. The callers allegedly threaten legal action, wage garnishment, or liens, then seek large upfront fees and sensitive data such as Social Security numbers, bank details, and tax-account credentials.
Online Threat Alerts warned about fraudulent calls from 202-992-9427 in which scammers impersonate the IRS or a tax relief service, threaten arrest or penalties, and try to steal money or personal information. The alert said the IRS initiates most taxpayer contacts by mail, and advised people to hang up, verify independently through IRS.gov, and report the calls to TIGTA.
Online Threat Alerts warned that people in the Maple Ridge area were being targeted by tax-related scams impersonating the Canada Revenue Agency, local municipal officials, and other trusted services. The scams used threats of arrest or legal action, demands for payment by wire transfer or gift cards, and fraudulent emails or social media ads promoting fake tax breaks.
A scam was described in which victims receive unsolicited messages claiming a relative has been detained and urgently needs bail money, after which fraudsters pose as lawyers representing the jailed person to pressure payment. The reporting also noted signs of AI-generated or manipulated scam media, including imagery bearing a Gemini watermark.
Online Threat Alerts warned about scam calls spoofing Toronto's 416 area code to impersonate banks, police, the Canada Revenue Agency, Service Canada, or fraud investigators in order to steal personal information, banking credentials, or money. The alert also highlighted one-ring callback scams that can trigger costly charges and advised reporting incidents to the Canadian Anti-Fraud Centre or local police.
Online Threat Alerts reported a scam in which impostors claiming to be Captain David Conway of the Missoula County Sheriff's Office contacted residents by phone or text, falsely saying they missed a court date or had an arrest warrant. The warning said the scammers sought personal information or money, and the sheriff's office stated that legitimate law enforcement does not demand payment or schedule court appearances by phone or text.
The Wayne County Sheriff's Office warned residents about active scam calls and text messages impersonating law enforcement, courts, and other trusted entities to demand payment for fake jury-duty violations, warrants, traffic offenses, tolls, or civil infractions. The notice said scammers used spoofed numbers, officer names, threatening language, cryptocurrency or gift-card payment demands, and included a 36th District Court QR-code text scam and a DTE Energy discount impersonation scam.
A warning described scams targeting Mecklenburg County residents in which fraudsters impersonate jury duty officials, county tax authorities, and local law enforcement using spoofed phone numbers. Victims were pressured to pay immediately via gift cards or wire transfers or to disclose sensitive information, while officials emphasized that such matters are handled by mail and not by phone.
Scammers targeting Harris County, Texas residents were reported impersonating local government entities through calls and text messages, falsely claiming victims owed money for unpaid tolls, traffic tickets, court fees, or missed jury duty. The campaign used phishing links and sometimes demanded payment via gift cards, while residents were advised to verify claims through official county contacts and report incidents to authorities.
Online Threat Alerts warned that scammers were sending text messages impersonating Penn Credit Corporation, demanding immediate payment for fake tolls or debts and linking to phishing sites. The notice advised recipients not to click or reply, to verify any alleged debt through official Penn Credit channels, and to report the scam to the FTC.
A warning was published about active scams targeting Franklin County, Ohio residents in which fraudsters impersonate sheriff’s deputies or court officials and demand immediate payment over fake warrants, missed jury duty, unpaid parking tickets, or the release of allegedly jailed family members. The scams reportedly use gift cards, cryptocurrency, cash apps, and fake texts with malicious QR codes, while residents were urged to verify claims through official county channels and report incidents to law enforcement or IC3.
Online Threat Alerts described a 'digital arrest' scam in which fraudsters impersonate Indian police or government officials, isolate victims on WhatsApp video calls using fake uniforms or staged police settings, and coerce them into transferring money as supposed deposits or settlements. The alert emphasized that no legitimate 'digital arrest' exists under Indian law and warned people not to share Aadhaar details, OTPs, or banking credentials.
Criminals impersonating Multnomah County Circuit Court staff and law enforcement were reported sending texts and making calls claiming victims owed urgent payments for fake court fees, missed jury duty, or warrants. The scam used fraudulent notices, QR codes, fake judge names, spoofed phone numbers, and fabricated badge numbers, while officials advised residents not to pay and to verify claims directly with the court or sheriff’s office.
Arkansas State Police warned about scam phone calls in which fraudsters impersonate Internet Crimes Against Children officers, falsely claim active investigations, and threaten warrants or arrest to pressure targets. The callers seek personal information and sometimes payment, and the agency said it will never call people to announce an investigation or threaten arrest by phone.
A vishing scam impersonating law enforcement was reported in which callers claimed victims had arrest warrants and demanded payment, often via gift cards, to avoid legal consequences. The scam was noted for using personal data, public-record case numbers, and AI-enabled techniques such as real-time voice translation and deepfake-like impersonation to appear credible.
A phone scam using the number 877-257-3122 was reported, with callers posing as a 'tax solutions and review agency' and claiming unresolved account activity required immediate follow-up. The campaign used urgency and official-sounding language to try to obtain personal or financial information.
Reports and online discussions described calls associated with Champion Strategy Holdings LLC using aggressive debt-collection tactics, including threats, demands for immediate payment, and claims about unrecognized or very old debts. Consumers were advised to request written debt validation, check credit reports, and report suspicious activity to regulators.
Florida's highway safety agency warned that it does not send text messages demanding payment for traffic tickets and advised residents not to click links, reply, or provide personal information. The alert also recommended reporting the messages to the FTC or IC3 and verifying claims through official channels.
A smishing campaign targeted Florida residents with text messages impersonating the Florida Department of Highway Safety and Motor Vehicles, falsely claiming recipients had unpaid traffic tickets and faced license or registration suspension unless they paid through a link. Reports of the scam were received statewide, indicating broad distribution.
New Hampshire State Police warned the public that scammers were impersonating state troopers, using the agency’s name to pressure targets as part of a fraud scheme. The notice advised residents to treat unsolicited demands or threats as suspicious and verify any claimed law-enforcement contact through official channels.
Finland’s Transport and Communications Agency Traficom warned that scam messages were being sent in its name falsely claiming recipients had an overdue unpaid fine. The messages were identified as phishing attempts aimed at getting victims to click a link and surrender online banking credentials.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. View all 13 in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
25 references tracked. Mallory keeps watching after this page renders.
onlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourcenhsp.dos.nh.gov
Open sourcekyberturvallisuuskeskus.fi
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The FBI's Internet Crime Complaint Center reported nearly 61,000 complaints and more than **$1.6 billion** in losses from government and law-enforcement impersonation scams between January 2025 and July 2026. Of those, 6,833 complaints involving threats of arrest, prosecution, imprisonment, or comparable consequences accounted for almost $36 million in losses. Fraudsters use unsolicited calls, spoofed agency names and phone numbers, and threats of criminal charges, fines, or professional repercussions to pressure victims into immediate payment. The campaigns have targeted medical practitioners, immigrants, foreign nationals, and international students, with more sophisticated operations using video calls, AI, fake uniforms, and mock government-office settings to appear legitimate. Victims are directed to pay through prepaid cards, wire transfers, cryptocurrency, or cash collected by couriers. The FBI said genuine government and law-enforcement agencies do not demand payment or sensitive information by phone or text and advised recipients to independently verify contacts using publicly listed official agency details.
Sep 21, 2026
Criminals are running **IRS impersonation scams** during tax filing season, using phone calls, emails, and texts to pressure victims into paying alleged tax debts or “fines,” or to trick them into disclosing sensitive personal and financial information. Common tactics include spoofed caller ID/sender details, use of official-looking IRS branding, and urgent threats (e.g., arrest or penalties) designed to short-circuit normal verification steps. Guidance highlighted for defenders and end users includes treating unsolicited IRS outreach as suspicious (the IRS typically initiates contact via mailed letters), refusing demands for immediate payment, and recognizing that requests for payment via **gift cards** or **cryptocurrency** are strong indicators of fraud. One reported lure centers on the phone number **`833-727-9955`** being used in “IRS scam calls,” consistent with broader IRS-themed social engineering that may be further amplified by **AI-enabled** voice/text techniques to increase credibility and scale.
Jun 29, 2026
Fraudsters are running a broad IRS impersonation campaign through robocalls, voicemails, texts, and emails that use fake names such as **Tax Mediation and Abatement Office**, **Tax Resolution Service Office**, **Taxpayer Abatement Assistance Office**, **American Tax Advocates**, and **American Tax Benefits**. The messages claim the target has unresolved tax issues, a file in "final review," frozen accounts, missed filings, or access to penalty relief or refunds, then pressure them to call back numbers including `888-355-0728`, `888-753-0127`, `888-663-0866`, `888-681-0352`, `888-788-3067`, `202-649-2801`, `202-649-2790`, `202-649-2783`, `771-222-3150`, `771-333-2237`, `771-333-2065`, `833-604-4139`, `877-706-0402`, `888-825-0405`, `888-551-2231`, `888-834-1048`, `888-792-0335`, `888-471-0706`, `833-684-4075`, `888-461-3098`, and `888-796-1408`. Some calls reportedly use spoofed caller ID, aliases such as **Laura Christie** and **Tara C. Hutchinson**, and AI-enhanced personalization to appear legitimate. The operation relies on classic social engineering: threats of arrest, fines, deportation, license revocation, liens, asset seizure, or collection escalation, alongside false promises to settle tax debts "for pennies on the dollar" or secure refunds. Victims are pushed to disclose personal data, IRS account credentials, and banking details, or to send money through gift cards, wire transfers, prepaid debit cards, or cryptocurrency; some lures also direct targets to phishing sites or malware-bearing links. The warnings align with the IRS **Dirty Dozen** advisory for the filing season, which highlighted impersonation, phishing, account theft, and malware risks targeting taxpayers and tax professionals. Officials and consumer alerts stress that the IRS generally initiates contact by postal mail, not unsolicited calls, texts, or social media, and urge victims to hang up, avoid calling back, verify any issue only through official IRS channels, and report incidents to **TIGTA**, the **FTC**, or `phishing@irs.gov`.
Jul 2, 2026