The FBI and the Internet Crime Complaint Center (IC3) issued a public service announcementwarning of a sophisticated phishing campaign where cybercriminals impersonate city and county officials.
The Scam Mechanism
The campaign specifically targets businesses and individuals with active applications for land-use, planning, or zoning permits.
- Targeting: Attackers use publicly available records—such as property addresses and permit application numbers—to make their emails look authentic.
- Method: Victims receive messages featuring official government seals, letterheads, and the names of actual local officials.
- The Demand: The emails claim that “outstanding fees” are required to move the permit forward. They typically pressure victims to pay via wire transfer, cryptocurrency, or peer-to-peer apps.
Protection and Verification Tips
To stay safe, the FBI recommends the following:
- Check the Domain: Official local government emails usually end in .gov. Scammers often use convincing alternatives like
.org or .com.
- Independent Verification: Never use the contact info provided in the email. Instead, find the department’s phone number on their official government website to confirm the request.
- Payment Red Flags: Legitimate government agencies will not demand payment via cryptocurrency or gift cards.