Fake Cops Threaten Arrest to Force Payments

Help Net Security · Medium sophistication
Last updated September 21, 2026

The FBI warns about phone scams where callers impersonate police or federal agents and threaten arrest unless the victim pays immediately. The scams use pressure tactics (keeping victims on the phone, urging secrecy) and push hard-to-trace payments like prepaid cards, crypto, wire transfers, or cash to a courier.

Key findings

  • FBI reports impersonation-scam losses of more than $1.6B (Jan 2025–Jul 2026).
  • Callers impersonate law enforcement/government, accuse victims of crimes or missed jury duty, and threaten arrest unless paid immediately.
  • Scammers use pressure tactics: urgency, aggression, isolation (don’t tell anyone), and keeping victims on the phone.
  • Payment methods commonly demanded: prepaid cards, wire transfers, cryptocurrency, or cash via courier.
  • Some scammers spoof real government phone numbers/names (including IC3), and some use fake uniforms/mock government sets.
  • Medical practitioners and immigrants/international students are specifically targeted with tailored threats.

Who’s being targeted

  • Commonly targeted roles: All employees, Executives, Finance/Payroll (anyone who can move money), Medical practitioners/clinical staff, Student services/international programs.
  • Affected industries: Healthcare, Education (international students), General public/consumers.
  • Attack channels: vishing.
  • Impersonated: Police officer or federal agent (law enforcement/government official), Court officer / law enforcement official, State medical board / licensing authority / law enforcement.

Awareness takeaways

  • Treat any call demanding immediate payment to avoid arrest or legal trouble as a scam until independently verified.
  • Never pay government- or law-enforcement-related ‘fees’ using prepaid cards, cryptocurrency, wire transfers, or courier cash.
  • If someone claims to be an official, hang up and verify using publicly available contact information (not the number they give you).
  • Watch for manipulation tactics like urgency, secrecy, and being kept on the phone, these are common scam behaviors.

Red flags to watch for

  • Threats of immediate arrest/prosecution if you don’t pay right now
  • Pressure to stay on the phone and not tell anyone
  • Requests for unusual payment methods (prepaid cards/crypto/courier cash)
  • Unexpected threat of an arrest warrant tied to payment
  • Demand for immediate payment over the phone
  • Caller discourages verification or contact with others
  • High-pressure demand tied to professional license revocation
  • Payment demanded immediately (often via nonstandard methods)
  • Caller resists verification through official channels
Try Mirage

Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.

Get a demo
Read the video transcript

“This is Agent Miller. You’re tied to a criminal investigation and there’s an arrest action pending unless you resolve this now.” This is a vishing scam the FBI says has cost over $1.6 billion. Fake cops or federal agents threaten arrest, keep you on the phone, and push you to pay right now with prepaid cards, wire transfers, crypto, or even cash to a courier. They’ll say you missed jury duty or are linked to a crime, threaten arrest or prosecution, order you not to tell anyone, and insist you stay on the line while you pay to "remove charges" or "assist an investigation." Here’s the rule: if a caller threatens arrest and demands immediate payment, hang up, then call the real agency using a number you find yourself.

Similar attacks

FBI: Fake Cops Swindle $1.6B via Threat Calls

FBI: Fake Cops Swindle $1.6B via Threat Calls

The FBI says scammers posing as law enforcement or government officials stole over $1.6B since January 2025, mainly by calling victims and threatening arrest, fines, or legal trouble unless they pay. Variants include jury-duty threats, targeted calls to medical professionals about license issues,…

September 18, 2026
Fake “Google Security” Vishing Script Exposed

Fake “Google Security” Vishing Script Exposed

Researchers spotted a Telegram job ad recruiting callers to impersonate the “Google Account Security Team” and run voice-phishing calls. The ad absurdly claimed “NO SCRIPT READING” while also publishing the exact phone script to use, showing a repeatable, real-world vishing workflow.

September 25, 2026
North Korean Fake IT Workers Ran US Laptop Farms

North Korean Fake IT Workers Ran US Laptop Farms

US authorities arrested two Americans accused of helping North Korean “fake IT workers” get hired remotely at US companies and route company laptops into US-based “laptop farms.” The scheme used stolen or fake identities and location-masking tools so overseas workers could appear to be working from…

October 14, 2026
Extortion Gang Plots Office Infiltration of Law Firms

Extortion Gang Plots Office Infiltration of Law Firms

Leaked chat logs linked to the Silent Ransom Group describe efforts to pressure U.S. law firms through extortion and, unusually, by sending in-person “agents” to physically enter offices and copy data. The FBI previously warned that people tied to the group were posing as IT staff to gain access,…

October 8, 2026
ShinyHunters Talked Into Odido via Spoofed Login

ShinyHunters Talked Into Odido via Spoofed Login

Dutch police are investigating ShinyHunters after a phone-based social engineering incident helped attackers break into Odido, the Netherlands’ largest mobile provider. Investigators say the caller persuaded an employee to log into a spoofed website, which was then used to steal data on more than…

September 28, 2026
Bitcoin ATM Payment Demand? It’s a Scam Script

Bitcoin ATM Payment Demand? It’s a Scam Script

The article describes a common fraud pattern where scammers impersonate police, government officials, or other trusted authorities over the phone to pressure victims into paying via a Bitcoin/crypto ATM. The victim is told their money is at risk, instructed to withdraw cash, and then directed to…

September 25, 2026