Imposter Scams: What to Watch for and How to Respond

• Imposter scams are becoming more sophisticated, often mimicking trusted institutions or personal contacts.
• Fraudulent requests frequently create urgency and may involve sensitive information or payment instructions.
• Independent verification is essential—especially for unexpected requests or financial transactions.

Imposter scams occur when criminals pose as trusted individuals, institutions, or organizations to obtain sensitive information, gain account access, or prompt fraudulent payments. These schemes may be carried out through email (phishing), phone calls (vishing), text messages (smishing), or social media.

Reported fraud losses have reached record levels, reflecting both the scale and increasing sophistication of these schemes. Criminals may impersonate government agencies, financial institutions, technical support providers, or even personal contacts. In some cases, they may attempt to replicate communications from advisors or counterparties to create a sense of familiarity and urgency.

For individuals and families with more complex financial lives, these attempts may also be tied to transactions, investment activity, or changes in payment instructions.

There are several ways imposters attempt to gain trust and access. Two of the more prevalent categories include:

Criminals are increasingly adept at replicating how legitimate organizations communicate with clients. Examples include:

• Fake transactions or deliveries: Messages may indicate a problem with an order or payment and prompt you to click a link. These links may capture sensitive information or install malicious software.
• Account or membership renewals: Fraudulent notices may request payment for services or subscriptions, relying on uncertainty about billing cycles.
• Technical support scams: Unsolicited messages may suggest there is an issue with your device and offer assistance. Granting access can allow a bad actor to control your system and potentially access sensitive information.

In certain cases, communications may attempt to mimic financial institutions, advisors, or vendors in order to influence payment decisions or disrupt legitimate transactions.

Fraudsters may pose as representatives of government agencies—such as tax authorities or Social Security Administration—to request payments or personal information. These messages may reference unpaid taxes, benefit adjustments, or legal consequences.

Criminals may also “spoof” phone numbers to make it appear as though a legitimate agency is calling. In practice, many government agencies initiate contact through official written correspondence rather than unsolicited calls or messages. 

A measured and deliberate approach can help reduce exposure to these types of scams:

• Pause before acting: Fraudulent outreach often conveys urgency to prompt immediate action. Take time to assess whether the request is expected and appropriate.
• Verify independently: Confirm the source of any unexpected request—particularly those involving sensitive information or funds—using trusted contact details. Avoid relying on phone numbers, links, or instructions provided in the message itself.
• Be cautious with links and websites: Misspellings, unusual domains, or poor-quality design may indicate a fraudulent site. When possible, navigate directly to known websites rather than using embedded links.
• Remain skeptical of unsolicited requests: Unexpected outreach—especially requests tied to account access, payments, or changes in instructions—should be approached with caution.

Requests involving the transfer of funds, updates to payment instructions, or transaction-related changes warrant additional scrutiny and should always be verified through established channels.

As a general principle, financial institutions and other reputable organizations typically will not:

• Request passwords or one-time passcodes for verification
• Ask you to install software on your device without prior engagement
• Seek to remotely access your device without authorization
• Instruct you to move funds in order to resolve a fraud issue

If you believe you may have been targeted or compromised:

• Contact your financial institution promptly to report the activity
• Attempt to reverse any unauthorized transactions as soon as possible
• Report the incident to appropriate authorities (such as the FTC)
• Update passwords and credentials for affected accounts

If you receive a request related to your accounts, transactions, or transfers, consider contacting your Wilmington Trust advisor directly using known contact information before taking action.

Consult a Wilmington Trust advisor to help validate requests and incorporate fraud safeguards into your broader wealth planning strategy.

This article is for informational purposes only and is not intended as an offer or solicitation for the sale of any financial product or service. It is not designed or intended to provide financial, tax, legal, investment, accounting, or other professional advice since such advice always requires consideration of individual circumstances. If professional advice is needed, the services of a professional advisor should be sought.

There is no assurance the any investment, financial, or estate planning strategy will be successful. These strategies require consideration for suitability of the individual, business, or investor.

Wilmington Trust is not authorized to and does not provide legal, tax, or accounting advice. Our advice and recommendations provided to you are illustrative only and subject to the opinions and advice of your own attorney, tax advisor, or other professional advisor.

Please complete the form below and one of our advisors will reach out to you.