Surge in Impersonation Scams Using Legal and Government Threats
A wave of impersonation scams is targeting individuals through phone calls and text messages, with fraudsters posing as debt collectors, tax agencies, law enforcement, and government departments. Victims report receiving unsolicited communications threatening legal action, arrest, or suspension of licenses unless immediate payment or personal information is provided. Tactics include aggressive language, urgent demands, and the use of official-sounding names or references to government codes to increase credibility. Notable examples include calls from entities like "Champion Strategy Holdings" and "Tax Solutions," as well as text messages purporting to be from the Florida Department of Highway Safety and Motor Vehicles (FLHSMV), all leveraging fear of legal consequences to coerce compliance.
Authorities and cybersecurity experts warn that legitimate agencies do not demand payment or sensitive information via unsolicited calls or texts, nor do they threaten arrest or license suspension without due process. Individuals are advised to verify any such claims through official channels, avoid clicking on suspicious links, and never provide personal or financial information in response to these threats. The prevalence and sophistication of these scams highlight the ongoing need for vigilance and public awareness to prevent financial loss and identity theft.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
24 events from the most recent confirmed update back to the earliest known activity.
Tax scam uses 'Tax Resolution Enrollment Services' and Elise Montgomery
Online Threat Alerts warned of a tax-relief scam using the name 'Tax Resolution Enrollment Services' and the persona 'Elise Montgomery' to lure targets into calling 888-261-3296 and 771-247-4359. The scam falsely promises government-backed tax debt reduction or elimination and seeks to steal personal information or money through urgent claims and deceptive outreach.
Spoofed Eden Police calls use 716-992-9211 to threaten arrest
Online Threat Alerts reported scam calls spoofing the Eden Police Department number 716-992-9211, with callers falsely claiming arrest warrants had been issued and attempting to obtain personal information. The warning said legitimate police do not demand money or threaten arrest over the phone and advised recipients to hang up and verify by calling the department directly.
Tax scam calls abuse 'Office of Filing Resolution Services' name
Online Threat Alerts warned about scam calls and messages from a purported 'Office of Filing Resolution Services' claiming victims owed tax debt or qualified for tax relief programs. The scam used urgent, intimidating language to pressure targets into disclosing personal information or making immediate payments, while the alert noted that the IRS generally initiates contact by mail and advised reporting incidents to TIGTA and the IRS.
Tax scam abuses American Tax Professionals and related business names
Online Threat Alerts warned of a tax impostor scam using the names 'American Tax Professionals,' 'American Tax Consultants,' and 'American Tax Services' in automated voicemail messages about old balances or missing returns. The callers allegedly threaten legal action, wage garnishment, or liens, then seek large upfront fees and sensitive data such as Social Security numbers, bank details, and tax-account credentials.
Tax scam calls reported from 202-992-9427
Online Threat Alerts warned about fraudulent calls from 202-992-9427 in which scammers impersonate the IRS or a tax relief service, threaten arrest or penalties, and try to steal money or personal information. The alert said the IRS initiates most taxpayer contacts by mail, and advised people to hang up, verify independently through IRS.gov, and report the calls to TIGTA.
Maple Ridge residents warned of CRA and municipal tax scams
Online Threat Alerts warned that people in the Maple Ridge area were being targeted by tax-related scams impersonating the Canada Revenue Agency, local municipal officials, and other trusted services. The scams used threats of arrest or legal action, demands for payment by wire transfer or gift cards, and fraudulent emails or social media ads promoting fake tax breaks.
Article highlights fake jailed-relative bail scam using lawyer impersonation
A scam was described in which victims receive unsolicited messages claiming a relative has been detained and urgently needs bail money, after which fraudsters pose as lawyers representing the jailed person to pressure payment. The reporting also noted signs of AI-generated or manipulated scam media, including imagery bearing a Gemini watermark.
Online alert warns of 416 area code spoofed scam calls in Canada
Online Threat Alerts warned about scam calls spoofing Toronto's 416 area code to impersonate banks, police, the Canada Revenue Agency, Service Canada, or fraud investigators in order to steal personal information, banking credentials, or money. The alert also highlighted one-ring callback scams that can trigger costly charges and advised reporting incidents to the Canadian Anti-Fraud Centre or local police.
Missoula County warns of David Conway sheriff impersonation scam
Online Threat Alerts reported a scam in which impostors claiming to be Captain David Conway of the Missoula County Sheriff's Office contacted residents by phone or text, falsely saying they missed a court date or had an arrest warrant. The warning said the scammers sought personal information or money, and the sheriff's office stated that legitimate law enforcement does not demand payment or schedule court appearances by phone or text.
Wayne County warns of law-enforcement and court impersonation scams
The Wayne County Sheriff's Office warned residents about active scam calls and text messages impersonating law enforcement, courts, and other trusted entities to demand payment for fake jury-duty violations, warrants, traffic offenses, tolls, or civil infractions. The notice said scammers used spoofed numbers, officer names, threatening language, cryptocurrency or gift-card payment demands, and included a 36th District Court QR-code text scam and a DTE Energy discount impersonation scam.
Mecklenburg County warns of jury duty and tax impersonation scams
A warning described scams targeting Mecklenburg County residents in which fraudsters impersonate jury duty officials, county tax authorities, and local law enforcement using spoofed phone numbers. Victims were pressured to pay immediately via gift cards or wire transfers or to disclose sensitive information, while officials emphasized that such matters are handled by mail and not by phone.
Harris County warns of government impersonation scam calls and texts
Scammers targeting Harris County, Texas residents were reported impersonating local government entities through calls and text messages, falsely claiming victims owed money for unpaid tolls, traffic tickets, court fees, or missed jury duty. The campaign used phishing links and sometimes demanded payment via gift cards, while residents were advised to verify claims through official county contacts and report incidents to authorities.
Penn Credit name abused in debt and toll payment phishing texts
Online Threat Alerts warned that scammers were sending text messages impersonating Penn Credit Corporation, demanding immediate payment for fake tolls or debts and linking to phishing sites. The notice advised recipients not to click or reply, to verify any alleged debt through official Penn Credit channels, and to report the scam to the FTC.
Franklin County warns of sheriff and court impersonation payment scams
A warning was published about active scams targeting Franklin County, Ohio residents in which fraudsters impersonate sheriff’s deputies or court officials and demand immediate payment over fake warrants, missed jury duty, unpaid parking tickets, or the release of allegedly jailed family members. The scams reportedly use gift cards, cryptocurrency, cash apps, and fake texts with malicious QR codes, while residents were urged to verify claims through official county channels and report incidents to law enforcement or IC3.
Online alerts describe India-focused 'digital arrest' extortion scam
Online Threat Alerts described a 'digital arrest' scam in which fraudsters impersonate Indian police or government officials, isolate victims on WhatsApp video calls using fake uniforms or staged police settings, and coerce them into transferring money as supposed deposits or settlements. The alert emphasized that no legitimate 'digital arrest' exists under Indian law and warned people not to share Aadhaar details, OTPs, or banking credentials.
Multnomah County court impersonation scam uses texts and calls
Criminals impersonating Multnomah County Circuit Court staff and law enforcement were reported sending texts and making calls claiming victims owed urgent payments for fake court fees, missed jury duty, or warrants. The scam used fraudulent notices, QR codes, fake judge names, spoofed phone numbers, and fabricated badge numbers, while officials advised residents not to pay and to verify claims directly with the court or sheriff’s office.
Arkansas State Police warns of ICAC impersonation scam calls
Arkansas State Police warned about scam phone calls in which fraudsters impersonate Internet Crimes Against Children officers, falsely claim active investigations, and threaten warrants or arrest to pressure targets. The callers seek personal information and sometimes payment, and the agency said it will never call people to announce an investigation or threaten arrest by phone.
Arrest-warrant vishing scam highlighted as increasingly sophisticated
A vishing scam impersonating law enforcement was reported in which callers claimed victims had arrest warrants and demanded payment, often via gift cards, to avoid legal consequences. The scam was noted for using personal data, public-record case numbers, and AI-enabled techniques such as real-time voice translation and deepfake-like impersonation to appear credible.
Tax-themed scam calls reported from 877-257-3122
A phone scam using the number 877-257-3122 was reported, with callers posing as a 'tax solutions and review agency' and claiming unresolved account activity required immediate follow-up. The campaign used urgency and official-sounding language to try to obtain personal or financial information.
Online reports warn of Champion Strategy Holdings debt-collection scam calls
Reports and online discussions described calls associated with Champion Strategy Holdings LLC using aggressive debt-collection tactics, including threats, demands for immediate payment, and claims about unrecognized or very old debts. Consumers were advised to request written debt validation, check credit reports, and report suspicious activity to regulators.
FLHSMV confirms payment-demand texts are fraudulent
Florida's highway safety agency warned that it does not send text messages demanding payment for traffic tickets and advised residents not to click links, reply, or provide personal information. The alert also recommended reporting the messages to the FTC or IC3 and verifying claims through official channels.
Florida residents targeted by FLHSMV unpaid-ticket text scam
A smishing campaign targeted Florida residents with text messages impersonating the Florida Department of Highway Safety and Motor Vehicles, falsely claiming recipients had unpaid traffic tickets and faced license or registration suspension unless they paid through a link. Reports of the scam were received statewide, indicating broad distribution.
New Hampshire State Police warns of scammers posing as troopers
New Hampshire State Police warned the public that scammers were impersonating state troopers, using the agency’s name to pressure targets as part of a fraud scheme. The notice advised residents to treat unsolicited demands or threats as suspicious and verify any claimed law-enforcement contact through official channels.
Traficom warns of phishing texts about overdue unpaid fines
Finland’s Transport and Communications Agency Traficom warned that scam messages were being sent in its name falsely claiming recipients had an overdue unpaid fine. The messages were identified as phishing attempts aimed at getting victims to click a link and surrender online banking credentials.
Related entities
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Sources
24 references tracked. Mallory keeps watching after this page renders.
7169929211 Scam and Spoofed Telephone Calls
onlinethreatalerts.com
Open sourceTax Resolution Enrollment Services Scam Call
onlinethreatalerts.com
Open sourceTax Consultants of America Voicemail Scam
onlinethreatalerts.com
Open sourceOffice of Filing Resolution Services Scam Telephone Calls
onlinethreatalerts.com
Open sourceIs the Champion Strategy Holdings Calls a Scam?
onlinethreatalerts.com
Open sourceFlorida FLHSMV DMV Text Scam
onlinethreatalerts.com
Open sourceNH State Police Warns of Scammers Posing as State Troopers | NH State Police
nhsp.dos.nh.gov
Open sourceHuijausviestejä Traficomin nimissä | Traficom
kyberturvallisuuskeskus.fi
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
IRS Impersonation Scams Targeting Taxpayers During Filing Season
Criminals are running **IRS impersonation scams** during tax filing season, using phone calls, emails, and texts to pressure victims into paying alleged tax debts or “fines,” or to trick them into disclosing sensitive personal and financial information. Common tactics include spoofed caller ID/sender details, use of official-looking IRS branding, and urgent threats (e.g., arrest or penalties) designed to short-circuit normal verification steps. Guidance highlighted for defenders and end users includes treating unsolicited IRS outreach as suspicious (the IRS typically initiates contact via mailed letters), refusing demands for immediate payment, and recognizing that requests for payment via **gift cards** or **cryptocurrency** are strong indicators of fraud. One reported lure centers on the phone number **`833-727-9955`** being used in “IRS scam calls,” consistent with broader IRS-themed social engineering that may be further amplified by **AI-enabled** voice/text techniques to increase credibility and scale.
Apr 18, 2026
IRS Impersonation Scam Uses Fake Tax Relief Offices and Spoofed Callback Numbers
Fraudsters are running a broad IRS impersonation campaign through robocalls, voicemails, texts, and emails that use fake names such as **Tax Mediation and Abatement Office**, **Tax Resolution Service Office**, **Taxpayer Abatement Assistance Office**, **American Tax Advocates**, and **American Tax Benefits**. The messages claim the target has unresolved tax issues, a file in "final review," frozen accounts, missed filings, or access to penalty relief or refunds, then pressure them to call back numbers including `888-355-0728`, `888-753-0127`, `888-663-0866`, `888-681-0352`, `888-788-3067`, `202-649-2801`, `202-649-2790`, `202-649-2783`, `771-222-3150`, `771-333-2237`, `771-333-2065`, `833-604-4139`, `877-706-0402`, `888-825-0405`, `888-551-2231`, `888-834-1048`, `888-792-0335`, `888-471-0706`, `833-684-4075`, `888-461-3098`, and `888-796-1408`. Some calls reportedly use spoofed caller ID, aliases such as **Laura Christie** and **Tara C. Hutchinson**, and AI-enhanced personalization to appear legitimate. The operation relies on classic social engineering: threats of arrest, fines, deportation, license revocation, liens, asset seizure, or collection escalation, alongside false promises to settle tax debts "for pennies on the dollar" or secure refunds. Victims are pushed to disclose personal data, IRS account credentials, and banking details, or to send money through gift cards, wire transfers, prepaid debit cards, or cryptocurrency; some lures also direct targets to phishing sites or malware-bearing links. The warnings align with the IRS **Dirty Dozen** advisory for the filing season, which highlighted impersonation, phishing, account theft, and malware risks targeting taxpayers and tax professionals. Officials and consumer alerts stress that the IRS generally initiates contact by postal mail, not unsolicited calls, texts, or social media, and urge victims to hang up, avoid calling back, verify any issue only through official IRS channels, and report incidents to **TIGTA**, the **FTC**, or `phishing@irs.gov`.
Jun 9, 2026
Fake Traffic Violation Texts Use QR Codes to Steal Payment Data
A smishing campaign is sending fake traffic violation, toll evasion, and DMV-related text messages to drivers across multiple U.S. states and other countries, impersonating courts, motor vehicle agencies, and toll operators such as **E-ZPass**. The messages pressure recipients with claims of unpaid fines, license suspension, or arrest, often cite small balances such as **$6.99**, and direct targets to malicious links or QR codes designed to harvest personal and financial information. Reported activity spans New York, California, North Carolina, Illinois, Virginia, Texas, Connecticut, and New Jersey, with similar lures also observed in Canada and India. Researchers said the campaign increasingly uses embedded QR codes to bypass security filters, sometimes sending victims through a CAPTCHA-protected intermediary page before redirecting them to spoofed payment portals. Observed phishing infrastructure included domains such as `ny.gov-skd[.]org` and `ny.ofkhv[.]life`, while the texts often originated from random or international numbers. State agencies said they do not request payment or sensitive information by text message, and recipients are being urged not to click, scan, or reply, to verify any alleged violation through official websites or contact channels, and to report the scam to their mobile carrier, the **FTC**, and the **FBI IC3**; anyone who submitted payment data should contact their bank immediately and replace affected cards.
May 30, 2026