FTC Targets Online Impersonation Scams: How Businesses Can Verify Who They Are Really Dealing With

The Federal Trade Commission is considering new measures aimed at the role online platforms can play in the spread of government and business impersonation scams.

On September 24, 2026, the FTC announced that it is seeking public comment on whether its existing Rule on Impersonation of Government and Businesses should be updated, or whether other measures are needed to address the way fraudulent advertisements are distributed online.

The scale of the problem is significant.

According to the FTC, consumers made more than one million reports concerning imposter scams during 2025 and reported losses of nearly $3.5 billion.

For businesses and individuals, the issue extends beyond obviously fraudulent emails or telephone calls.

Modern impersonation schemes can involve convincing websites, legitimate-looking advertisements, fabricated businesses, stolen identities and communications designed to appear as though they originate from a trusted organization.

The result is a simple but increasingly important question: how do you establish who you are really dealing with?

What Is a Business Impersonation Scam?

Business impersonation occurs when a fraudster pretends to represent a genuine company or creates a false organization designed to resemble a legitimate one.

The objective can vary.

A fraudulent identity might be used to obtain payment, collect personal information, persuade someone to disclose account credentials or establish credibility before a larger financial fraud takes place.

Impersonation may involve:

• A business name copied from a legitimate company.
• A website designed to resemble a genuine organization.
• Lookalike email addresses or domains.
• Fraudulent online advertisements.
• Fake customer-service representatives.
• False invoices or payment instructions.
• Individuals claiming to be company executives or employees.
• Fabricated businesses with apparently credible online profiles.
• Government agencies or officials being falsely represented.

Individually, some of these elements can appear convincing.

The problem becomes more difficult when several are combined.

A website may look professional. A company name may appear in public records. An individual may have a convincing social-media profile. An advertisement may appear on a recognized platform.

None of those factors, by themselves, necessarily proves that the person making contact is who they claim to be.

Why the FTC Is Looking at Online Advertising

The FTC's latest action focuses particularly on the way digital platforms distribute and optimize advertising.

Search engines, social-media platforms and digital marketplaces allow advertisers to reach highly specific audiences.

Those capabilities are valuable to legitimate companies, but the FTC is examining whether similar tools can also help scammers place impersonation advertisements in front of potential victims.

The regulator is seeking information about issues including advertiser vetting, the monitoring of advertisements, the investigation and removal of suspected impersonation content and potential action against advertisers responsible for fraudulent campaigns.

The FTC reported that nearly 30% of consumers who lost money to scammers in 2025 said the initial contact occurred through social media, with reported losses associated with those contacts reaching $2.1 billion.

The presence of an advertisement on a familiar platform should therefore not be treated as independent confirmation that the advertiser itself has been verified.

A Convincing Digital Presence Is Not Proof of Identity

One of the central difficulties with modern fraud is that creating the appearance of legitimacy has become relatively easy.

A convincing online identity can be assembled using company information, photographs, biographies, social-media profiles, copied website content and publicly available business data.

Fraudsters may also use genuine details belonging to an unrelated person or organization.

That means apparently corroborating information can sometimes lead back to the legitimate business being impersonated rather than the person who actually initiated the contact.

Conflict International USA regularly deals with matters where the key question is not simply whether information exists online, but whether the available information can be connected reliably to the person, company or transaction being examined.

Our Specialized Private Investigations USA service can support individuals, attorneys, businesses and professional advisors where fraud, business impersonation, suspicious online identities or other complex fact-finding is involved.

The objective is to establish reliable facts and identify inconsistencies rather than relying on appearance alone.

What Can Be Checked?

The appropriate verification depends on the circumstances.

There is no single database or check capable of establishing whether every business relationship or online contact is genuine.

Instead, an investigation may consider several different information sources and assess whether they support the same identity.

Depending on the matter, this may include:

• Corporate registration information.
• Directors and business principals.
• Trading addresses.
• Historical company information.
• Websites and domain information.
• Email addresses.
• Telephone numbers.
• Publicly available professional profiles.
• Related companies.
• Litigation or insolvency information.
• Payment details supplied during the transaction.
• Previous online activity.
• Connections between individuals, companies and addresses.

The significance often lies in discrepancies.

A company may exist but the person claiming to represent it may have no identifiable connection to the organization.

A website may use the name of a genuine business while operating from a different domain.

A professional profile may contain accurate information copied from another individual.

A payment request may direct funds somewhere unrelated to the organization supposedly issuing the invoice.

These discrepancies can provide important indicators that further verification is required.

Fake Identities Can Be Built Over Time

Not every impersonation scam begins with an immediate request for money.

Some frauds are designed to build credibility gradually.

An individual may communicate with a target for weeks or months, create apparently independent sources of reassurance and only introduce a financial request once trust has been established.

We examined this issue previously in Romance and Investment Fraud: How Fake Identities Build Financial Trust, where an alleged scheme used false identities and multiple individuals to reinforce the credibility of investment claims.

Although the circumstances of individual frauds vary, the underlying principle is relevant to business impersonation as well.

Information that appears to come from two independent sources may ultimately have been created or controlled by the same person or group.

Independent verification therefore means checking information outside the channels provided by the person asking to be trusted.

Verification Matters Before Money Is Sent

Many investigations begin after money has already been transferred.

At that point, identifying the parties involved can become substantially more difficult.

Funds may have moved to another account, cryptocurrency may have been transferred between wallets or the online infrastructure used in the fraud may have disappeared.

Where the value of a transaction is significant, verification before payment can therefore be considerably easier than investigating what happened afterwards.

Businesses can reduce exposure by introducing independent checks when:

• A new supplier requests a significant payment.
• Existing payment details suddenly change.
• An executive appears to request an unusual transfer.
• A previously unknown intermediary becomes involved.
• A new investment opportunity is introduced.
• Someone claims to represent a recognized organization.
• Urgency is being used to discourage normal verification.
• Payment is requested through an unexpected method.
• Corporate details do not align with the information supplied.

A request being urgent does not reduce the need to establish who is making it.

In many impersonation schemes, urgency is part of the deception.

Businesses Can Be Victims Even When Consumers Are the Target

Business impersonation creates risks for the organization being copied as well as for the individual who loses money.

A legitimate company's name, branding or employee identities may be used without its knowledge.

Victims may initially believe they have been dealing with the genuine organization, creating potential reputational problems and customer complaints for a business that had no involvement in the fraud.

Companies that become aware of impersonation activity should preserve evidence of the fraudulent material.

That may include:

• Screenshots.
• Website addresses.
• Email headers.
• Advertisements.
• Telephone numbers.
• Payment instructions.
• Social-media accounts.
• Copies of communications.
• Dates and times of contact.

This information may help establish how the impersonation is operating and whether apparently separate incidents are connected.

Independent Verification in an Era of Digital Impersonation

The FTC's latest action reflects the growing sophistication and financial impact of impersonation fraud in the United States.

Technology can make a fraudulent identity look increasingly convincing, but the underlying challenge remains the same.

A professional website, familiar company name or apparently legitimate advertisement does not necessarily establish the identity of the person behind it.

Where a transaction, investment or business relationship involves significant financial or commercial exposure, independent verification can help establish whether the people and organizations involved are genuinely connected to the identities they are presenting.

Conflict International USA assists individuals, businesses, attorneys and professional advisors with complex fraud and fact-finding matters across the United States and internationally.

If you are dealing with a suspected business impersonation, fraudulent identity or suspicious transaction, contact Conflict International USA in confidence to discuss the information available and the appropriate investigative approach.