If someone who says they work for the FTC calls to tell you a phone was registered under your name and is being used to commit scams in another country, you are almost certainly being targeted by an impersonator. The Federal Trade Commission states plainly that a real FTC employee will never threaten to disconnect your phone, will never ask you to send money, and will never tell you to keep the conversation secret.

The original alert was published by the FTC on October 27, 2026, and describes a specific escalation script that scammers are using. This article walks through that script in order, so you can recognize the pattern from the first call rather than midway through a payment request.

How the impersonation call begins

According to the FTC, the call opens with a claim that a phone was registered under your name and number and is being used to commit scams in another country. To make the claim sound official, the caller reads off a badge ID — which the FTC describes as fake. The pressure point comes next: if you do not cooperate, the caller threatens to deactivate your phone number.

Nothing in that opening is a legitimate FTC action. The FTC states that a real employee will never threaten to disconnect your phone. So the first threat in the call is already a contradiction of how the agency says it operates.

The transfer that looks like verification

The call does not end with the threat. The impersonator will transfer you to a supposed police officer to file a report, and if you hesitate, they may tell you to call the police department back directly. They also tell you what to search online to find the number.

This is the part that feels like verification. The FTC's own description is that it feels like you are verifying the story, but it is all part of the scheme. When you call the number they gave you, people involved in the scam pick up. The callback loop is controlled by the same operation that placed the first call.

That detail matters for anyone caught mid-call. Searching for a number online and dialing it yourself does not confirm the caller's identity if the number was supplied by the caller. The appearance of a second, independent check is part of the design.

What the callers ask for

Once the conversation reaches the supposed police report, the scammers ask for your ID and other personal information for the report, and they tell you to keep everything secret. The FTC lists secrecy as one of the behaviors a real employee will never use. A legitimate agency contact does not ask you to hide the conversation from family, banks or other authorities.

The escalation continues later with more bad news. The callers claim you are under arrest for the scams your phone number was associated with and say you have to go to another country — unless you send money for a security deposit. The demand for money arrives only after the identity theft claim, the fake police transfer, and the secrecy instruction have all been established.

The four statements to test against

The FTC's alert gives four statements about what a real employee will never do. They are worth keeping in plain form, because each one corresponds to a step in this script:

  • A real FTC employee will never reach out to ask you to send money, and will never connect you to someone who says to send money.
  • A real FTC employee will never threaten to disconnect your phone.
  • A real FTC employee will never tell you to keep your conversations secret.
  • A real FTC employee will never text you a photo of their employee ID to verify their identity.

The last point covers a variant not described in the call script itself: a texted photo of an employee ID. The FTC treats that as something a real employee will never send, so a photo ID arriving by text is not confirmation of anything.

Why the callback feels convincing

Two features make this script harder to spot than a simple demand for payment. First, the caller supplies a badge ID, which sounds like a credential but is described by the FTC as fake. Second, the caller hands you a way to check the story — a number to search for and call — and then answers that number.

Both features rely on the same weakness: the verification path is chosen by the person making the claim. A check that runs through the caller's own contacts is not an independent check. The FTC's description of the scheme is that the apparent verification is part of it.

What the source does not say

The alert does not state how many people have received these calls, how much money has been lost, or where the callers are located. It does not name the phone numbers used, the supposed police departments involved, or the countries mentioned in the script. It does not describe any arrest, charge, investigation or enforcement action against the impersonators. It does not say whether the callers use spoofed FTC caller ID, and it does not give a technical method for blocking the calls.

The alert also does not describe what a reader should do after personal information or money has already been sent. Those steps are outside the source, and this article does not supply them.

What the alert actually establishes

The source is an FTC consumer alert describing a reported impersonation pattern and listing agency practices. It establishes the script as the FTC describes it and the four statements about what real employees never do. It does not establish that any particular call you receive is from this operation, and it does not provide a list of legitimate FTC outreach numbers.

The practical reading is narrow and useful: the FTC says it will not threaten to cut off your phone, will not route you to someone demanding money, will not ask for secrecy, and will not text an employee ID photo. A call that does any of those things matches the pattern in the alert, and the demands escalate in the order the FTC describes.

Sources