Imposter scams borrow authority, familiarity, or fear

The identity is the setup

An imposter pretends to be a government office, bank, employer, support agent, delivery company, family member, or another trusted party. Caller ID, email display names, official-looking documents, real employee names, and cloned voices can all be faked or borrowed.

The requested behavior is the tell

Watch for pressure to move money for protection, pay a fine immediately, buy gift cards or cryptocurrency, share a verification code, install remote-access software, or keep the conversation secret. The exact story changes; the attempt to isolate the target and control the verification path is consistent.

Verify outside the script

End the contact. Use a known app, statement, official website, or trusted phone number to reach the organization or person. Talk to someone you trust before moving money. If money or account access was already provided, contact the financial institution or platform promptly and use official recovery and reporting routes.

After money or information moved

Contact the relevant bank, payment provider or account service through its official fraud route as quickly as possible and preserve the message, destination and timing. Recovery is not guaranteed, and the right reporting path depends on the payment and jurisdiction. The FTC guidance can help consumers organize next steps without implying that Svertok receives or investigates reports.

Example: the executive gift-card request

A message appearing to come from a senior leader asks an employee to buy gift cards quickly and keep the task confidential. The unusual payment, secrecy and urgency are the signals. Verification through the organization’s normal contact path can resolve the request without replying to the sender. The lesson is not that executives never make urgent requests; it is that consequence deserves independent confirmation.

Why personal detail is not authentication

Names, roles, relatives, addresses and recent events can be public, purchased or stolen. Voice and image can also be imitated. Use a prearranged channel or question tied to a real relationship, and verify the action rather than trying to detect synthetic media by intuition alone. The control should still work when the message looks and sounds polished.