FTC: $3B Lost to Imposter Scams as Gunra Ransomware Hits Hospitals

KEMETIC MINDS
Cybersecurity Scam Watch — Weekly Report — August 17, 2026

Photo: Gustavo Fring via Pexels (source)

Consumers lost more than $3 billion to imposter scams, according to the FTC (Yahoo News, 2026), and a cruel new “recovery” con is now targeting people who were already defrauded (MSN Money, 2026). Federal agencies also issued back-to-back warnings about Gunra ransomware operators hitting critical infrastructure and hospitals (Becker’s Hospital Review, 2026; Homeland Security Today, 2026). Here’s the full breakdown of what happened this week and how to protect yourself.

• Consumers lost more than $3 billion to imposter scams, with losses reaching $3.5 billion last year alone (Yahoo News, 2026).
• A Dayton woman lost $13,000 to a fake police officer who claimed a warrant was out for her arrest and ordered her to tell no one (Yahoo News, 2026).
• The FTC’s top consumer protection official says tech platforms like Google and Meta “aren’t doing enough” to stop impersonation scams (MSN News, 2026; Yahoo News, 2026).
• The FTC issued a new alert about “refund and recovery” scams that target people who have already been defrauded (MSN Money, 2026).
• CISA, the FBI, DC3, the NSA, and the U.S. Secret Service jointly warned that Gunra ransomware actors are targeting critical infrastructure (Homeland Security Today, 2026).
• Hospitals are facing Gunra ransomware attacks exploiting Fortinet flaws, with double-extortion tactics and a five-to-seven-day ransom deadline (Becker’s Hospital Review, 2026).

1. Imposter Scams Bank $3 Billion From Consumers

Watch how a real fake police warrant call unfolds — and the red flags that give it away.

The Federal Trade Commission says people lost more than $3 billion to imposter scams — and the schemes are no longer just phone calls (Yahoo News, 2026). Thieves are posing as police, businesses, and government agencies, and the fraud is increasingly playing out on social media.

The I-Team consumer alert traced the damage to real victims. Earlier this year, Jamie Cox of Dayton received a call from someone claiming to be a Dayton police officer who said, “We have a warrant out for your arrest. Don’t talk to anybody. Don’t tell anybody what you’re on the phone for.” She lost $13,000 in the scam (Yahoo News, 2026).

Last year alone, people lost $3.5 billion to these schemes, according to the FTC (Yahoo News, 2026). FTC Director of Consumer Protection Chris Mufarrige called imposter scams “if not the biggest fraud problem, one of the biggest” (Yahoo News, 2026).

Social media is now a major playground for impersonators. Someone created a fake account for an auto shop in Harrison Township, someone posed as an Oakwood bakery to steal customers’ personal information, and someone even impersonated K99.1 FM host Nancy Wilson. “It really makes me angry because there are so many people out there who are vulnerable,” Wilson said (Yahoo News, 2026).

Mufarrige put the burden on platforms: “We cannot have an online economy where it is this easy to impersonate somebody. It just undermines our markets” (Yahoo News, 2026).

How to Avoid This Scam

• Hang up on any caller who says you have a warrant and orders you to keep it a secret — real police don’t demand secrecy (Yahoo News, 2026).
• Never trust caller ID. Call the agency or business back on its published phone number before acting.
• If you spot a cloned account for a local business or radio host on social media, report it to the platform right away.
• Report every imposter contact to the FTC’s fraud reporting page (Yahoo News, 2026).

2. ‘Refund and Recovery’ Scams Target Past Victims

Watch how a real fake refund/recovery con unfolds — and the red flags that give it away.

The FTC issued a new consumer alert this week about “refund and recovery” scams (MSN Money, 2026). These schemes specifically target people who were already impacted by another scam, and the scammers claim they can help victims get their money back (MSN Money, 2026).

It’s a second hit on the same victim: someone who has already lost money is told a new “helper” can retrieve it. The FTC’s consumer alert warns that these offers are themselves a scam (MSN Money, 2026).

How to Avoid This Scam

• Treat any unsolicited call, text, or ad promising to recover money you lost as a second scam (MSN Money, 2026).
• Never pay an upfront fee or share account details with anyone who guarantees your money back.
• Report the original fraud to the FTC first — official channels don’t charge for help.

3. FTC Pressures Google and Meta Over Online Scams

Watch how a real government imposter threat unfolds — and the red flags that give it away.

The FTC is warning consumers about a growing wave of imposter scams, and the agency’s top consumer protection official says Google and Meta need to do more to stop online scams (MSN News, 2026). In MSN’s report, the official made clear the responsibility isn’t only on individual users (MSN News, 2026).

That message aligns with what FTC Director of Consumer Protection Chris Mufarrige told News Center 7: the tech platforms “have a role to play” in solving the problem, and the FTC doesn’t think “they’re doing enough” (Yahoo News, 2026).

How to Avoid This Scam

• Use the reporting tools on Google and Meta platforms to flag impersonator accounts, ads, and cloned business pages (MSN News, 2026).
• Include screenshots and the page URL when you report a fake account so it can be removed faster.
• Don’t rely on a platform’s “verified” badge alone; contact the real business through its official website or phone number.

4. CISA Warnings Expose Election Security Gaps

Watch how a real voter registration verification phish unfolds — and the red flags that give it away.

An opinion piece published Sunday argues that CISA warnings expose gaps in America’s election security (The Washington Times, 2026). The Washington Times analysis turns the focus to election systems at a moment when cyber threats to critical services are front and center.

The piece serves as a reminder that election security warnings from CISA deserve serious attention from voters and election workers alike.

How to Avoid This Scam

• Get election information only from your state or county election office’s official website, never from forwarded messages or social media.
• Treat any unsolicited email or text claiming to be from election officials or election software vendors as a likely phishing attempt.
• Bookmark CISA’s official site so you can check its election-security guidance directly instead of relying on third-party summaries.

5. Joint CISA-FBI Warning: Gunra Ransomware Targets Critical Infrastructure

Watch how a real fake ransomware it helpdesk unfolds — and the red flags that give it away.

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation, the Department of Defense Cyber Crime Center (DC3), the National Security Agency, and the U.S. Secret Service jointly released a warning that Gunra ransomware actors are targeting critical infrastructure (Homeland Security Today, 2026).

Organizations running critical services should treat the joint advisory as an urgent prompt to verify their security posture (Homeland Security Today, 2026).

How to Avoid This Scam

• If you operate critical infrastructure, read the joint advisory and confirm your security team has acted on it (Homeland Security Today, 2026).
• Verify that your incident-response plan names the right federal contacts for a suspected Gunra compromise.
• Test your backup restoration process now — ransomware operators rely on untested backups failing when it matters most.

6. Gunra Ransomware Targets Hospitals via Fortinet Flaws

Watch how a real fake fortinet security patch unfolds — and the red flags that give it away.

CISA and the FBI also issued a hospital-specific warning: Gunra ransomware attacks are exploiting Fortinet flaws and using double-extortion tactics, with victims given a five-to-seven-day ransom deadline (Becker’s Hospital Review, 2026).

The Becker’s Hospital Review report gives hospital IT teams the key details: a deadline designed to pressure fast payment and a double-extortion model that compounds the damage (Becker’s Hospital Review, 2026).

How to Avoid This Scam

• Patch Fortinet devices immediately — the advisory specifically ties Gunra attacks to Fortinet flaws (Becker’s Hospital Review, 2026).
• Treat the five-to-seven-day ransom deadline as a pressure tactic; plan to restore from offline backups rather than pay (Becker’s Hospital Review, 2026).
• Because double extortion means stolen data can be leaked, inventory what sensitive data sits on your network and rehearse your breach-notification process.
• Segment hospital networks so a compromised device cannot reach patient-care systems.

This Week’s Family Safety Checklist

• If someone calls, texts, or messages you claiming to be police, a business, or a government agency, verify through an official channel before doing anything — imposter scams have cost consumers over $3 billion (Yahoo News, 2026).
• Report every scam attempt to the FTC’s fraud reporting page; the agency says consumer reports are key to pressuring tech platforms (Yahoo News, 2026).
• If you’ve already lost money to a scam, be extra suspicious of anyone who promises to recover it — that’s the new “refund and recovery” play (MSN Money, 2026).
• If your employer runs a hospital, utility, or other critical infrastructure, ask whether they’ve reviewed the joint Gunra ransomware advisory from CISA and the FBI (Becker’s Hospital Review, 2026; Homeland Security Today, 2026).

References

1. Bing News. (2026, August 13). I-TEAM Consumer Alert: Imposter scams bank $3B from consumers. yahoo.com
2. Bing News. (2026, August 10). New consumer alert warns about scams targeting previously defrauded individuals. msn.com
3. Bing News. (2026, August 12). FTC official says Google, Meta need to do more to stop online scams. msn.com
4. Bing News. (2026, August 16). CISA warnings expose America’s election security gaps. washingtontimes.com
5. Bing News. (2026, August 11). CISA, FBI Warn Gunra Ransomware Actors Targeting Critical Infrastructure. hstoday.us
6. Bing News. (2026, August 12). Gunra ransomware targets hospitals: CISA, FBI issue new warning. beckershospitalreview.com