Tips from FBI on Recognizing Fraudulent Attorney Scams Exploiting Cryptocurrency Swindle Victims

In a recent update published by the FBI's Internet Crime Complaint Center (IC3) on August 13, 2025, a scheme involving fake lawyers defrauding victims of cryptocurrency scams has been highlighted. This scheme, which has reportedly reached a historical record in scale, targets vulnerable populations, particularly the elderly.

The fraudsters impersonate or falsely affiliate themselves with multiple government entities to give victims a sense of safety and security. Red flag indicators include impersonation or affiliation as 'official authorized partners' with multiple US and foreign government or regulatory entities, which is not an existing status for law firms.

Some fraudsters breach legitimate law firms and use their infrastructure to send highly credible emails from real domains belonging to law firms. Others pose as lawyers from fictitious law firms and use social media and messaging services to deceive victims.

Malicious actors keep records, including recordings of video chats, of all interactions. Knowledge of the exact amounts and dates of previous wire transfers and the third-party company where the victim previously sent scammed funds is also a red flag. Suspicious behaviors that can trigger the victims to detect malicious intent include claims that the victim was on a government-affiliated list of scam victims, references to a "crypto recovery law firm", and requests for payment in cryptocurrency or prepaid gift cards.

The FBI has provided a list of security measures to prevent falling for these scams. These include requesting video verification, documentation, or a photo of a law license. People should also use a zero-trust model in these circumstances, verifying the employment of anyone claiming to work for the US government or law enforcement.

Moreover, requiring notarized proofs of identity from the supposed lawyers before continuing communications and transactions is another crucial step. Be cautious of law firms contacting unexpectedly, especially if not reported to law enforcement or civil protection agencies.

The uncontrolled proliferation of fake law firms can lead to increased costs of litigation and settlements. The organization that identified Ilia Kolochenko, CEO at ImmuniWeb and a Fellow at the British Computer Society (BCS), as the alleged source for a fraud involving fake law firms is the Ukrainian Cyber Police.

Those recruited by organized fraud syndicates to provide "customer support" may not necessarily understand the nature of the work they do. Other red flags include unwillingness or inability to provide credentials or a license, not appearing on camera and not conducting video meetings.

In light of these threats, it is essential for individuals to stay vigilant and follow the recommended security measures to protect themselves from falling victim to these scams.