Scammer IP address: don't chase it, and watch for fake FBI fund recovery

Quick answer

Tracing a scammer yourself isn't the answer, and people who offer to do it or to recover your money are often scammers too. The FBI says the IC3 never contacts people by phone, email or social media and never charges to recover funds. Report at ic3.gov.

All scam alerts
Pretends to be
FBI Internet Crime Complaint Center (IC3)
First reported
Latest official alert
(FBI IC3)
Last updated

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

How it works

The FBI says it received more than 100 reports of IC3 impersonation between December 2023 and February 2025. The contact varies: an email, a phone call, or a message on social media or a forum.

Almost all victims were told the scammers had recovered their lost money or could help get it back. That claim is a ruse to scam people who were already scammed once.

In one version, scammers set up female profiles on social networks and join groups for fraud victims, posing as fellow victims. They recommend that members contact a man described as the "Chief Director" of IC3 on Telegram. Once you reach out, he claims your money was recovered and uses that to get your financial information.

An older 2018 version arrived by email: a fake restitution notice asked recipients to fill in an attached text file. The file contained malware.

Sources checked: ic3.gov

Last verified against the official page:

How we research this Report an error

Red flags

  • Someone says they are from the IC3 and contacts you by phone, email, social media or an app
  • A stranger offers to recover money you lost to a scam
  • You're asked to pay a fee, or sent to a company that charges one, to get funds back
  • A "restitution" email asks you to download and return an attachment
  • A new friend in a fraud victims group points you to a private chat with an "official"
  • You're asked for bank details, gift cards or crypto to "release" recovered money

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown sender to me
Our records show you are eligible for restitution after a fraud case was closed. To claim your funds, contact our director at [link] or download the attached form and return it with your account details.

What to do

  1. 1

    Don't reply or download anything

    The IC3 will not contact you directly by phone, email, social media or phone apps. Delete the message and don't open attachments.

  2. 2

    Never pay to get money back

    The IC3 doesn't ask for payment to recover lost funds and won't send you to a company that does. Don't send money, gift cards or crypto to anyone you only know online or by phone.

  3. 3

    If you shared financial details, call your bank

    Use the number on your card or your bank's website. Tell them what happened and ask what protections they can add.

  4. 4

    If you opened an attachment, check your device

    Change passwords for important accounts from a different, clean device and turn on two-step verification.

  5. 5

    Report it with details

    The FBI asks for how contact started, any websites, emails or phone numbers used, and payment details such as dates, amounts, account numbers and crypto addresses.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Fund recovery scammers target people who have already lost money, so they often have your details from the first scam or from lists of victims. Scammers need a way to reach you, and phone numbers, email addresses and home addresses are easy to find on people-search sites and in data breaches. Serus finds the listings that show your details and removes them, and alerts you when your data shows up in a breach, so fewer scammers can reach you. Our guide on what to do after a data breach covers the next steps if your details leaked.

Official alerts

  1. FBI Warns of Scammers Impersonating the IC3 · FBI IC3
  2. Impersonation of the Internet Crime Complaint Center · FBI IC3

Frequently asked

Can I find a scammer's IP address myself?

The official guidance doesn't ask victims to investigate. The FBI asks you to report what you have, such as websites, emails, phone numbers and payment details, through ic3.gov.

Does the IC3 contact victims by phone or email?

No. The FBI says the IC3 never directly communicates with individuals by phone, email, social media, phone apps or public forums. If more information is needed, FBI employees from a local field office or other law enforcement will contact you.

Will the FBI charge to recover my money?

No. The IC3 won't ask for payment to recover lost funds or refer you to a company that does.

I'm over 60 and need help filing a report. Who can I call?

The FBI lists the DOJ Elder Justice Hotline for victims aged 60 or over who need help filing an IC3 complaint. The number is on the FBI alert linked below.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.