Talk to a real person, free: AARP Fraud Watch Helpline 877-908-3360 (weekdays). Worried about your bank account? Call the number on the back of your card.

Scam guides › Phantom hacker / "move your money" scam

Phantom hacker scam: fake tech support, fake bank, fake government

Updated . By the AskBeforeYouSend editorial team (how we fact-check). Fact-checked against the official sources listed at the bottom.

Short answer: It's a three-step scam the FBI says hits older adults hardest. A fake tech support agent gets into your computer, a fake bank or brokerage "fraud department" says foreign hackers got into your accounts, and a fake government agent, often claiming to be from the Federal Reserve, tells you to move your money to a "safe" account. There is no safe account. The FBI says the U.S. government will never ask you to send money by wire to foreign accounts, crypto, or gift or prepaid cards.

Key facts

What it looks like

This is Agent Miller with the Federal Reserve. Foreign hackers have accessed your retirement account. To protect your savings, you must wire the funds to a secure government account today. Do not tell the bank teller why.

A made-up example based on the FBI's description of phase 3.

How the scam works

  1. Phase 1: a pop-up, call, text or email sends you to fake "tech support", who installs remote-access software and has you open your financial accounts.
  2. Phase 2: a fake bank or brokerage worker says hackers got in and you must move your money to a "safe" third-party account.
  3. Phase 3: a fake Federal Reserve or other government official "confirms" it, sometimes with an official-looking letter, and pushes you to keep moving money, sometimes over days or months.

Red flags

What to do now

  1. Hang up. Don't let anyone who contacted you control your computer.
  2. Call your bank or brokerage using the number on your card or statement.
  3. Tell a family member or friend before moving any money.
  4. If money already left, call your bank right away to try to stop the wire.
  5. Report it to the FBI's IC3 and your local FBI field office.
Never send money, gift cards, crypto or verification codes because of a call, text or message. Hang up and call the real number.

Check a message like this

Report it

Questions

Would the Federal Reserve ever call me?

The Federal Reserve says it will never contact the public with unsolicited phone calls or emails asking for money or personal information. A call like that is a scam.

My parent already moved money. What should we do?

Call their bank right away to try to stop or recall the transfer, then report it to IC3 at ic3.gov and the local FBI field office. Include names, phone numbers and the account numbers the money went to.

Sources

Example messages are made up to show the pattern unless we say otherwise. Phone numbers in examples use the fictional 555 range.

Get next week's scam before it reaches you

One short email a week: the newest scam going around, a real example, the warning signs, and exactly what to do. Free, always. Plus a free printable Scam-Proof Fridge Sheet and Family Safety Checklist.

No spam. Unsubscribe anytime. We never sell or share your email. Privacy

Related scams

Tech support pop-up / fake renewalBitcoin / crypto ATM scamUnpaid toll text (E-ZPass, SunPass, FasTrak)Package delivery text (USPS, UPS, FedEx)Grandparent / family emergency scamMedicare card or benefits scam

Latest scam alerts · All 29 scam guides