Government Impersonation Scams Up 40% — What the FTC’s 2026 Data Means for Retailers

Fraudsters are increasingly pretending to represent trusted government organizations to create urgency and pressure victims into taking immediate action. By using fake calls, emails, websites, and official-looking documents, scammers exploit public trust to commit identity theft and financial fraud.

What Are Government Impersonation Scams?

They happen when fraudsters pretend to represent legitimate government agencies to trick individuals or businesses into sharing sensitive information, making payments, or giving unauthorized access to systems or accounts.

These scammers often pose as organizations such as the:

• Internal Revenue Service (IRS)
• Social Security Administration (SSA)
• Federal Bureau of Investigation (FBI)
• Department of Motor Vehicles (DMV)
• Medicare
• State tax and regulatory agencies

By using the authority and familiarity of these organizations, fraudsters create a sense of urgency that makes their requests seem legitimate. They may claim that taxes are overdue, a license needs to be renewed, compliance issues need immediate attention, or legal action is about to be taken unless the business responds quickly.

For retailers, these scams can be especially convincing because working with government agencies is a normal part of running a business—from managing licenses and tax requirements to handling inspections and compliance responsibilities.

What Does the FTC's 2026 Report Actually Say?

The latest data from the Federal Trade Commission (FTC) shows that imposter scams continue to be one of the biggest fraud threats facing consumers and businesses. In 2025, the FTC received more than 1 million reports of imposter scams, with reported losses reaching $3.5 billion—nearly a 20% increase compared to the previous year.

Fact Box: Imposter scams were the #1 reported scam category for the ninth year in a row.

One trend stands out for retailers: reports involving government imposter scams increased by roughly 40%, making them one of the fastest-growing imposter scam categories. These scams rely on the credibility of trusted agencies to create urgency and pressure victims into sharing information, making payments, or taking unauthorized actions.

Why Retailers Are Increasingly Targeted by Fraudsters

Retail businesses manage a combination of financial transactions, sensitive customer information, regulatory obligations, and day-to-day operations that make them attractive targets for government impersonation scams.

High Volume of Financial Transactions

Retailers process countless transactions every day, including vendor payments, tax filings, payroll, refunds, and customer purchases. Because employees regularly handle financial requests, fraudulent payment demands can appear routine—especially when they seem to come from a government agency.

Access to Sensitive Data

Many retailers store customer information such as names, addresses, phone numbers, email addresses, and, in some cases, driver's license information for age verification or regulatory compliance. If scammers gain access to this data, it can be used for identity theft, account fraud, or additional phishing attacks.

Compliance Pressure

Businesses operating in regulated industries—including tobacco, alcohol, cannabis, gaming, and pharmacies—must comply with licensing, tax, and reporting requirements throughout the year. Scammers exploit these obligations by sending fake compliance notices or threatening fines, license suspensions, or other penalties unless immediate action is taken.

Valuable Business Information

Business tax records, banking information, payroll data, supplier accounts, employee records, and vendor relationships all have significant value to cybercriminals. Fraudsters often disguise themselves as government officials to convince employees to disclose this information.

Omni-Channel Communication

Today's retailers communicate through phone calls, emails, text messages, online portals, and messaging platforms. Scammers leverage these same channels to blend fraudulent communications into everyday business operations, making fake requests more difficult to recognize.

High Employee Turnover

Many retail businesses regularly hire seasonal or entry-level employees who may be unfamiliar with common fraud tactics. Without proper security awareness training, new employees can become easy targets for social engineering attacks.

Fast-Paced Store Environments

Retail employees are often balancing customers, inventory, deliveries, and administrative tasks simultaneously. In busy environments, urgent requests may receive less scrutiny, creating opportunities for scammers to exploit split-second decisions.

Common Government Impersonation Scam Tactics Against Retailers

Government impersonation scams aim to convince retailers they’re communicating with a legitimate agency. Understanding common tactics can help businesses identify suspicious requests before they result in financial loss or data breaches.

Fraudulent Regulatory Inspection Scams

Scammers may pose as health departments, labor agencies, or other regulators, claiming a business violated regulations and demanding immediate payment or documentation. Verify unexpected inspection or enforcement requests through official channels.

Fake License Renewal Scams

Fraudsters may claim a business license or permit is expiring and request payment or sensitive information through unfamiliar websites. Always confirm renewal notices with the appropriate licensing agency.

Fake Tax Payment Demands

Scammers often impersonate the IRS or state tax agencies, threatening fines or legal action over unpaid taxes or penalties. Legitimate agencies do not use high-pressure tactics or demand immediate payment through unofficial channels.

Fake Law Enforcement Calls

Fraudsters may pretend to be police officers or federal agents and threaten arrests, investigations, or business closure. These intimidation tactics are designed to pressure victims into acting without verification.

Vendor and Compliance Verification Scams

Scammers may pose as vendors or compliance representatives to collect business records, banking details, tax IDs, or login credentials. Verify any request for sensitive information before sharing details.

Gift Card Payment Scams

Government agencies never require payment through gift cards. Requests to purchase gift cards or provide card numbers for fines, fees, or penalties are a major scam warning sign.

Gift card scams continue to be one of the most common tactics used by fraudsters. Learn how these scams work, why they're so effective, and how to avoid falling victim in our guide to gift card scams.

Fraudulent Phishing Emails

Some government impersonation scams begin with emails containing fake notices, documents, or links designed to steal information or install malware. Verify suspicious messages before opening attachments or clicking links.

Phishing and impersonation scams continue to evolve, making fraud detection more important than ever. Learn how identity verification technology helps businesses detect suspicious activity and protect against identity-based fraud.

Warning Signs Retailers Should Watch For

While government impersonation scams continue to evolve, many share common warning signs. Recognizing these red flags can help retailers avoid becoming victims.

Unexpected Government Contact

Be cautious of unsolicited calls, emails, or texts claiming to be from a government agency—especially if you weren’t expecting contact. Verify the message by reaching out through official contact information.

Immediate Payment Demands

Scammers often demand immediate payment to avoid fines, penalties, license issues, or legal action. Legitimate agencies typically follow formal notification and payment processes.

Threat-Based Communication

Many scams use fear tactics, including threats of arrest, lawsuits, account freezes, or business shutdowns, to pressure victims into acting quickly without verification.

Requests for Sensitive Business Information

Be wary of requests for banking details, employee records, tax information, customer data, login credentials, or business documents. Always confirm the requester’s identity before sharing sensitive information.

Suspicious Documentation

Fake government messages may include spelling errors, unofficial email addresses, altered logos, unusual formatting, or suspicious links. Verify all documents through official channels before taking action.

How Businesses Can Prevent Government Impersonation Scams

While scammers continue to evolve their tactics, retailers can reduce risk by putting strong security practices and internal procedures in place.

Train Employees to Identify Social Engineering Attempts

Employees are often the first line of defense against fraud. Provide regular training on phishing emails, suspicious calls, and social engineering tactics. Encourage staff to verify unexpected requests instead of responding to pressure or urgency.

Implement Identity Verification Procedures

Create clear processes for verifying requests involving payments or sensitive information. Employees should use official contact methods—not phone numbers, links, or instructions provided in unsolicited messages.

Identity verification plays an important role in preventing fraud and protecting sensitive information. Learn more about how digital identity verification helps businesses confirm identities, reduce fraud risks, and create more secure interactions.

Monitor Suspicious Account Activity

Regularly review financial transactions, user accounts, and business systems for unusual activity. Early detection can help limit losses and prevent larger security issues.

Protect Customer Identity Data

Use cybersecurity best practices, including role-based access controls, encryption, strong password policies, and multi-factor authentication. Limiting access to sensitive information helps reduce the impact of potential attacks.

Establish Fraud Reporting Processes

Create clear procedures for reporting suspected scams. Employees should know how to escalate suspicious activity, and management should have a plan for investigating and responding to potential fraud.

Where to Report Government Impersonation Scams

If your business encounters a suspected government impersonation scam, reporting it can help investigators identify fraud trends and prevent additional victims.

Federal Trade Commission (FTC)

The FTC collects reports of fraud, identity theft, and government impersonation scams through its online reporting system. Information submitted helps law enforcement track emerging scam tactics and educate the public.

FBI Internet Crime Complaint Center (IC3)

Businesses that experience online fraud, phishing attacks, or other internet-enabled crimes can submit reports to the FBI's Internet Crime Complaint Center (IC3). The FBI uses these reports to identify cybercrime patterns and support investigations.

The Government Agency Being Impersonated

Many federal and state agencies maintain dedicated fraud reporting resources for scams involving their organization. Reporting the incident directly to the agency being impersonated helps them warn the public and investigate fraudulent activity.

State Attorney General's Office

State attorneys general investigate consumer fraud and deceptive business practices within their jurisdictions. Reporting government impersonation scams to your state’s attorney general’s office can support enforcement efforts and help protect other businesses from similar schemes.