Bank impersonators alone stole $1 billion from Americans in 2025, the FTC reports

a man sitting at a table looking at his cell phone and holding a credit card

Americans reported losing nearly $1 billion to scammers posing as their banks in 2025, making bank impersonation the single largest driver of business-impersonation fraud tracked by the Federal Trade Commission. That figure sits inside a broader $3.5 billion in total imposter-scam losses reported last year, a sharp jump from $2.95 billion in 2024. The FBI has separately flagged the same pattern through its own complaint channel, reinforcing that the problem is accelerating across federal data systems.

Why $3.5 billion in imposter losses demands attention right now

The scale of the 2025 numbers is hard to dismiss. The FTC recorded more than 1 million imposter-scam reports for the year, with losses climbing roughly 19 percent over the prior year’s $2.95 billion baseline. Bank impersonators accounted for the highest reported losses among all business impersonators, outpacing scammers who posed as tech companies, utilities, or retailers. Government impersonators, a separate category, cost victims about $920 million.

One reason this spike matters beyond the raw dollar totals: the losses reflect only what victims chose to report. The FTC’s Consumer Sentinel Network aggregates complaints filed voluntarily, so actual theft is almost certainly larger. Scammers who impersonate a victim’s own bank exploit an unusually high level of trust. A caller or text that appears to come from a familiar institution can bypass the skepticism people apply to unknown contacts, which helps explain why the bank subcategory leads the pack.

A related question is whether communities with less exposure to federal banking guidance suffer disproportionately. The FDIC publishes consumer alerts on bank impersonation scams and fake banks, but no public dataset currently links ZIP-code-level page traffic for those alerts to reported loss rates. Without that data, the hypothesis that lower regulatory literacy predicts higher victimization remains untested, though the logic is straightforward: people who never encounter verification guidance are less likely to pause when a convincing caller says their account has been compromised.

FTC and FBI data converge on the same fraud vector

Two independent federal agencies now quantify the same threat. The FTC’s June 2026 release placed $3.5 billion in imposter-scam losses for 2025, with business impersonators responsible for nearly $1 billion of that total and bank impersonators at the top of the business subcategory. The FBI’s Internet Crime Complaint Center, tracking a narrower slice of the problem, logged over 5,100 complaints of account-takeover fraud carried out through impersonation of financial institution support since January 2025, with losses exceeding $262 million.

The FBI figure covers a specific tactic in which scammers convince victims to hand over login credentials or authorize transfers by pretending to be bank fraud departments. The FTC’s number captures a wider universe of imposter scams, including fake tech support, sham utility collectors, bogus sweepstakes, and criminals posing as government agencies. That methodological gap makes the convergence of the two datasets more striking: even under different definitions and reporting pipelines, both show a steep rise in fraud that hinges on the same psychological playbook-urgent warnings, authority cues, and manufactured crises that pressure people into bypassing normal safety checks.

FTC analysts emphasize that imposter scams remain one of the most commonly reported fraud categories across age groups. Visualization tools in the agency’s public dashboards, accessible through its interactive data portal, show imposter fraud consistently near the top of complaint charts whether sorted by volume or by dollars lost. While older adults often lose more money per incident, younger consumers report high exposure to text and social-media-based impersonation, suggesting that no demographic can safely tune out the risk.

How bank impersonation scams typically unfold

Most bank impersonation schemes start with a message that looks like a routine security alert. Victims receive a text or call claiming that a suspicious charge has been detected or that their account will be frozen without immediate action. The scammer then urges the target to read back a one-time passcode, move funds to a “safe” account, or install remote-access software so the supposed representative can “help” secure the device.

These tactics exploit both trust and fear. People are conditioned to believe that banks monitor for fraud and will reach out when something looks wrong. When that expectation is weaponized, even consumers who know not to click random links can be nudged into breaking their own rules-especially if the caller already knows partial account details harvested from earlier data breaches or phishing campaigns.

Once access is granted, criminals move quickly. They may change contact information, initiate wire transfers, or add new payees to drain funds before the real institution flags anything unusual. In some cases, victims do not realize what happened until legitimate alerts arrive, at which point recovering the money can be difficult or impossible, depending on the type of transfer and how fast the fraud is reported.

Why the official numbers still understate the damage

Although the reported $3.5 billion figure is staggering, both FTC and FBI officials note that underreporting is endemic. Some victims never learn how to file a complaint. Others feel ashamed or assume that nothing can be done. Small-business owners, in particular, may treat losses as a cost of doing business rather than a crime worth documenting.

That reporting gap has policy consequences. Law enforcement task forces, regulatory priorities, and bank security investments are often shaped by complaint data. If only a fraction of victims speak up, resource allocation can lag behind the true threat. Conversely, the rapid growth in documented bank impersonation-even with incomplete data-has already begun to push financial institutions and regulators to revisit how they authenticate customers and communicate about fraud.

For now, the numbers from 2025 function as both a warning and a baseline. They confirm that impersonation has become a dominant fraud vector, that banks are the most lucrative masks for criminals to wear, and that the official tally almost certainly captures only part of the story. Whether 2026 brings more aggressive countermeasures-or simply a higher loss column-will depend in part on how quickly institutions and consumers adapt to a world where any “bank” message might be a trap.