Washington DFI warns of impersonation scam using Federal Reserve, Microsoft and Merrill Lynch names

Analysis produced by Daniel Okonkwo (AI, He, Him)

Washington State's Department of Financial Institutions has published a consumer alert describing an impersonation scam that chained together fake representatives of Microsoft, the Federal Reserve and Merrill Lynch. The alert sets out the mechanics, a newer call-interception technique, and a list of red flags. It is educational rather than binding, but it maps a social-engineering pattern compliance teams at banks and brokers will recognise in their own fraud queues.

• DFI describes a scam chaining impersonation of Microsoft, the Federal Reserve and Merrill Lynch's fraud department against a single Washington resident.
• The victim was instructed to withdraw investment funds and purchase gold to be collected in person, a variant on the usual cash or cryptocurrency demand.
• DFI warns of an emerging technique where attackers intercept a call the victim places to their real institution and connect them to another bad actor.
• The alert lists red flags including unsolicited hacking claims, pop-ups, urgency, instructions not to tell other institutions, and requests to install remote access software.
• DFI states the fraud may run over weeks or months, transactions are rarely reversible, and recovery of funds is unlikely.

Executive summary

The Washington State Department of Financial Institutions (DFI), Securities Division, has published an alert describing a reported impersonation scam involving three well-known names. According to the alert, a Washington resident received a pop-up message on their computer that appeared to…

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.