Skip to content

FBI Internet Crime Complaint Center

FBI unit (IC3.gov) that collects public complaints about internet-facilitated crime, including fraud and scams, for investigation and analysis.

Known aliases

  • ic3.gov

Current stories

securityOne report1 publisher

FBI warned students in May of ShinyHunters harassment and swatting after a learning-platform attack

In a May 15, 2026 public service announcement, the FBI warned that ShinyHunters may target students and families with threats and swatting. The group had claimed the attack behind a nationwide learning-platform outage, and the bureau's advice was to pay nothing and verify any contact through a channel already known.

Publishers:ic3.gov

Reality

Evidence50
Adoption
Not scored
Hype gap−10
Incentives
Not scored
Confidence65
securityOne report1 publisher

North Korean IT workers pay Americans to appear on camera and keep work laptops online

FBI says North Korean IT workers increasingly depend on witting and unwitting Americans to win jobs at U.S. companies. The bureau says no single indicator catches them, so employers have to weigh several signals together.

Publishers:ic3.gov

Reality

Evidence50
Adoption
Not scored
Hype gap
Not scored
Incentives
Not scored
Confidence55
leadershipOne report1 publisher

Wachtell Lipton wants boards to know what their own AI agents are allowed to do

Wachtell Lipton urges boards to check that cyber reporting captures AI risk, citing more than 22,000 AI-related complaints to the FBI in 2025. Delaware's Caremark duty turns on whether that reporting exists, so the firm wants a company's own AI agents inside it.

Reality

Evidence40
Adoption
Not scored
Hype gap+15
Incentives40
Confidence55
scienceOne report1 publisher

Reported cybercrime cost Americans over 60 about $7.75 billion in 2025

Americans 60 and older filed about 20% of FBI cybercrime complaints in 2025 and bore more than 37% of reported losses. One woman's roughly $100,000 loss over three days, after a fake bank-support handoff, shows why the usual post-scam checklist falls short.

Reality

Evidence60
Adoption
Not scored
Hype gap0
Incentives20
Confidence55
securityConfirmed14 publishers

ShinyHunters pins its claimed FBI breach on an unpatched PeopleSoft RCE

The extortion crew defaced apply.fbijobs.gov on September 22 and told reporters it got remote code execution from a new Oracle PeopleSoft flaw, the same one it says it is now using against Fortune 500 targets. No technical details are public.

Perspective Coverage

14 publishers
Builder
Builder 20%
Operator
Operator 67%
Investor
Investor 13%

Reality

Evidence40
Adoption
Not scored
Hype gap+40
Incentives75
Confidence60
leadershipConfirmed3 publishers

ShinyHunters claims 2 to 3 terabytes of FBI personnel data from an Oracle PeopleSoft flaw

The bureau has not confirmed a breach and says it cannot yet tell whether its own systems or a third-party provider were the way in, while Reuters and 404 Media report that sample records match real personnel.

Perspective Coverage

3 publishers
Builder
Builder 22%
Operator
Operator 63%
Investor
Investor 15%

Reality

Evidence55
Adoption45
Hype gap+30
Incentives80
Confidence60
leadershipOne report1 publisher

FBI says North Korean IT workers are ransoming stolen code once employers spot them

An updated bureau alert describes hired developers copying repositories into personal cloud accounts and then demanding payment once they are found. Seven of its eleven recommendations still sit at the hiring gate.

Publishers:fbi.gov

Reality

Evidence62
Adoption
Not scored
Hype gap+10
Incentives30
Confidence58
securityOne report1 publisher

FBI ties $1.6 billion in losses to police and government impersonation scams over 19 months

The refreshed IC3 alert covers January 2025 through July 2026 and describes callers who spoof real government numbers, including IC3's own, so verification means a callback to a number the recipient looks up.

Reality

Evidence60
Adoption55
Hype gap+10
Incentives40
Confidence62
leadershipOne report1 publisher

Blocking Kali365 means deciding which business processes still need device code flow

The FBI says a subscription kit sold on Telegram harvests Microsoft 365 OAuth tokens through device code lures. The mitigation it recommends is a tenant-wide block, and somebody has to decide the exceptions.

Publishers:fbi.gov

Reality

Evidence65
Adoption35
Hype gap−10
Incentives25
Confidence60
investOne report1 publisher

FinCEN turns 33,904 scam-linked filings into a dated red-flag list for banks

Treasury put $12.7bn behind 33,904 suspicious activity reports about crypto investment fraud, and the more consequential half of that release is the dated indicator list compliance teams are now asked to screen against.

Reality

Evidence52
Adoption28
Hype gap+18
Incentives62
Confidence55