Security   |   First Harvest   |   08/14/2026

Don’t be Convinced by Impersonation Scams

Impersonations scams are effective because they do not always begin with something ridiculous. They begin with something familiar.

Scammers don’t just ask for money; they prey on your trust. They want you to believe that the person contacting you is an employee of your financial institution, a government official, a tech support representative, or even someone you love. Once that happens, the rest gets much easier. You stop evaluating the message as a threat and start responding to it as a problem that needs to be solved. Impersonation scams can take many forms, but they all rely on the same basic idea: if someone can convince you they are a trusted person or institution, they can often convince you to act against your own interests.

Why Impersonation Works

Most of the time, it makes sense to believe your financial institution is trying to protect your account. Most of the time, it makes sense to take a call from a family member seriously. Most of the time, it makes sense to respond when a company says there is a security issue.

Scammers will take advantage of those normal instincts and try to manipulate you by making you feel rushed, embarrassed, confused, or afraid. Their message often comes with pressure. You need to act immediately. You need to verify your identity. You need to move your money. You need to keep the matter confidential. You need to stay on the phone.

That pressure is not a side detail. It is the scam.

Types of Impersonation Scams

Bank or Credit Union

This is one of the most common impersonation scams. You receive a text, call, or email that appears to come from your bank or credit union. It may warn about suspicious charges, a locked account, a failed login attempt, or a problem with your debit card. The scammer’s goal is likely to get you to click a fake login link, reveal personal information, provide a security code, or send money under the claim that your funds need to be "protected."

Sometimes the scammer says your money is at risk and tells you to transfer it to a "safe" account. That is not how legitimate financial institutions protect customers. A real bank or credit union will not ask you to move your money to protect it from fraud. And it will not ask you to buy gift cards, deposit cash into a crypto ATM, or send money through a payment app to fix an account problem.

As a reminder, First Harvest will never ask you to provide any online banking passwords or sensitive debit card information such as your card number, CVV (Card Verification Value) code, or PIN (Personal Identification Number). If you suspect your account or card information has been compromised, please contact us immediately.

Government

Another common pattern is when a scammer claims to be from the IRS, Social Security Administration, Medicare, law enforcement, immigration, or another official agency. These scams often lean heavily on fear. You may be told there is a warrant for your arrest, a problem with your taxes, suspicious activity tied to your Social Security number, or a threat to your benefits. The message may sound formal and serious to curb your suspicions.

Real government agencies do not handle serious financial or legal matters by demanding immediate payment through gift cards, cryptocurrency, or wire transfers. They also do not usually resolve major issues through a threatening phone call out of the blue.

Family Emergency

Another common example is when a caller claims to be your child, grandchild, sibling, or friend and says there is an emergency. They might claim to be in jail, stranded while traveling, the victim of an accident, or need money now, but they don’t want anyone else to know. These scams can be especially persuasive because they target emotions. If you think someone you love is in danger, your first instinct is to help. That is exactly what the scammer is counting on.

New technology has made these scams even more convincing. Voice-cloning tools can mimic a person's voice well enough to create panic in the moment. That makes it even more important to slow down and verify the story through a number or contact method you already have.

Tech Support

In another version, the scammer calls pretending to be from a well-known tech company or device manufacturer and says your computer has a virus. Or you may see a frightening pop-up warning that your device has been compromised and telling you to call a support number immediately. The scammer's goal is often to gain remote access to your device, collect payment for fake repair services, steal passwords, or install malware.

A real company is not likely to cold-call you because your laptop has a virus. And a pop-up warning you that your computer is infected and that you must call a number right now is not customer service. It is theater.

How They Reach You

Impersonation scams can arrive through almost any channel. Phone calls are common because they create pressure quickly. Text messages work well because they are short, immediate, and often trusted more than email. Emails can copy real branding closely enough to look convincing at a glance. Social media messages and fake customer support chats add even more ways to make a scam feel legitimate.

Caller ID, email display names, company logos, and even personal details do not mean the communication is legitimate. Scammers can spoof many of these details and may have access to information from data breaches, public records, or social media. That does not mean every unexpected message is fake. It means appearance alone is not enough.

Red Flags

The details vary, but impersonation scams tend to repeat the same warning signs:

  • Unexpected contact about a financial or legal problem.
  • Pressure to act right away.
  • Requests for codes, passwords, or personal information.
  • Demands for unusual payment methods.
  • Instructions to keep the matter secret.
  • A story that falls apart when you slow it down.

How to Respond

The safest habit is simple: do not use the message itself to verify the message.

If you get a call from your financial institution, hang up and call the number on the back of your card or from their official website. If you get a text about a package, log in through the retailer's or carrier's real app or website. If a family member calls in distress, hang up and contact them directly through a number you already know. If someone claims to be from a government agency, go to the official site yourself and find the public contact information there.

That separate-step habit protects you from a huge number of impersonation scams. A few other habits help too:

  • Don't click links in unexpected texts or emails involving money, account access, or urgent action.
  • Don't share one-time passcodes, passwords, or sensitive personal information with someone who contacted you first.
  • Don't let a caller keep you on the phone while you move money, log in to accounts, or install software.
  • Don't assume a familiar voice, official tone, or correct personal detail proves anything by itself.
  • And if something feels off, it is okay to end the conversation abruptly. You do not owe politeness to someone pressuring you about money.

Impersonation scams work by creating a believable identity and then using pressure to override your usual judgment. The scammer may sound helpful, official, caring, calm, or urgent. None of that proves the contact is real. What matters is verification, because a real institution can handle that pause while a scam usually cannot.