Cybercrime

FBI Warns of Spoofed IC3 Website

Threat actors likely spoofed the official government website for personal information theft and monetary fraudulent activity.

FBI

The FBI on Friday issued an alert on threat actors spoofing the official Internet Crime Complaint Center (IC3) government website.

The FBI’s IC3 website is the central hub for reporting cybercrime-related activities, such as online extortion, hacking, identity theft, money laundering, and ransomware attacks. Launched in 2000 as the Internet Fraud Complaint Center (IFCC), it was renamed in 2003.

Spoofed websites, the FBI explains, can be used for the theft of personal information and to facilitate monetary fraud or other illicit activities.

To deceive users into accessing the spoofed websites, threat actors rely on alternative spelling of words, or use a different top-level domain than the legitimate site.

Individuals could access a spoofed FBI IC3 website when attempting to find the official domain to submit a complaint, the FBI explains.

“Threat actors create spoofed websites often by slightly altering characteristics of legitimate website domains, with the purpose of gathering personally identifiable information entered by a user into the site, including name, home address, phone number, email address, and banking information,” the Bureau notes.

Advertisement. Scroll to continue reading.

To avoid accessing the spoofed websites, the FBI recommends that users navigate to the legitimate IC3 website by typing www.ic3.gov in the browser’s address bar. Users are also advised to avoid clicking on the sponsored results when using a search engine to find the domain, and ensure that the IC3 site they visit ends in [.]gov.

Additionally, the FBI recommends that users avoid clicking on URLs that differ from the legitimate IC3 site, that they do not click on links with suspicious artifacts or graphics, and that they never share sensitive information unless they are sure that the website is legitimate.

“IC3 will never ask for payment to recover lost funds, nor will IC3 refer someone to a company requesting payment for recovering funds,” the agency notes.

The Bureau also notes that the IC3 does not maintain social media accounts and encourages users to report any incidents.

Related: Noise Storms: Massive Amounts of Spoofed Web Traffic Linked to China

Related: Sophisticated ‘VastFlux’ Ad Fraud Scheme That Spoofed 1,700 Apps Disrupted

Related: A Key US Government Surveillance Tool Should Face New Limits, a Divided Privacy Oversight Board Says

Related: Democrats and Republicans Are Skeptical of US Spying Practices, an AP-NORC Poll Finds

Related Content

Cybercrime

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

Cybercrime

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.

Cybercrime

The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.

Cybercrime

Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.

Cybercrime

In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.

Malware & Threats

The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised.

ICS/OT

Revision 4 of NIST’s operational technology security guide is open for public comments until November 30.

Cybercrime

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version