The FBI wants voters and political donors to slow down before they click. In a public-service announcement titled “Scammers Exploit 2026 U.S. Midterm Election to Perpetrate Multiple Fraud Schemes,” dated October 15, 2026, the bureau laid out how con artists are riding the wave of midterm campaign activity to steal cash and personal data. The announcement, filed through the FBI’s Internet Crime Complaint Center (IC3), does not name a single victim or a dollar figure lost. It does something arguably more useful for a national audience three weeks out from Election Day: it maps the exact scripts scammers are running, from fake voter-registration alerts to campaign “investment” pitches that promise a payout once a candidate wins.
The warning, first widely reported by The Register, lands at a moment when election security coverage has mostly focused on voting-machine integrity and foreign interference. This PSA is about something more mundane and, for most people, more dangerous: everyday financial fraud that uses the midterms as a hook. For a technology audience, it is also a reminder that the same social-engineering playbook used against corporate help desks and crypto wallets works just as well on a 72-year-old voter who gets a text claiming she is not registered to vote.
What the FBI’s October 2026 Warning Actually Says
The core of the FBI’s PSA is an impersonation problem. According to the bureau, scammers use the names, images, logos, and slogans of candidates to fraudulently solicit campaign contributions, sell merchandise that is never delivered, or steal personally identifiable information, or PII, that can be used for other fraud. That single sentence covers three distinct business models: donation fraud, fake merchandise fraud, and data harvesting dressed up as campaign engagement.
The FBI also flagged the delivery mechanisms. Victims are reached through unsolicited calls, texts, emails, or surveys, the kind of outreach that looks, at a glance, like ordinary campaign activity during a midterm cycle. That is precisely the point: a text claiming to be from a candidate’s office is hard to distinguish from a real one unless the recipient already knows what a legitimate campaign communication looks like. The FBI’s PSA does not identify any specific candidate, PAC, or company tied to these schemes, and it stops short of naming victims or scammers. Readers should treat any claim of a dollar amount, a specific candidate being impersonated, or a named suspect in this story as unconfirmed unless it comes from the FBI’s own announcement or a named outlet.
The Fake Voter Registration Scam
One of the two specific schemes the FBI described works like this: a message arrives claiming the recipient is not registered to vote. It directs them to what looks like a state voter-registration page, except it is not the state’s site at all. It is built to capture personal data, the kind of PII that can later be used for identity theft, account takeover, or resale on fraud forums. The scam works because it manufactures urgency around a real anxiety: nobody wants to show up and find out they cannot vote.
From a technical standpoint, this is a straightforward credential-harvesting pattern dressed in civic clothing, the same shape as a fake bank-login page or a spoofed corporate SSO portal. The fix is also familiar to anyone who has sat through security-awareness training: never trust a registration status check that arrives via an unsolicited link. The FBI’s guidance is to go to a known-good source directly, such as a state election office site or the federal vote.gov portal, rather than clicking through from a text or email.
The Guaranteed-Return Campaign Investment Scheme
The second scheme the FBI named is more unusual, and arguably more revealing about how fraud has evolved. Scammers promise victims a guaranteed return on campaign contribution dollars by investing in a candidate campaign pool that supposedly pays out after the candidate wins. In plain terms, this is an affinity-fraud pitch borrowed straight from investment-scam playbooks, repackaged around political enthusiasm instead of crypto hype or a Ponzi-style trading club.
The FBI’s language on this point is blunt. Campaign donations are not an investment and will not increase in value nor be returned, the bureau said in its PSA. That framing matters because it draws a bright line that a lot of victims apparently need spelled out: a political contribution is a gift, not a security, and any pitch suggesting a financial return on it is, by definition, fraudulent. There is no legal mechanism by which a campaign donation generates a payout to the donor, regardless of whether the candidate wins.
Impersonation, Merchandise, and Donation Fraud
Beyond the two detailed schemes, the FBI’s broader warning covers classic impersonation fraud: fake fundraising pages, counterfeit merchandise stores that take payment and never ship, and donation solicitations that route money to a scammer’s account instead of a real campaign. None of these are new tactics. What changes each cycle is the packaging, and what makes the 2026 midterms a target-rich environment is the sheer volume of legitimate campaign fundraising traffic a scam can hide inside.
This is also where the PII theft angle compounds the financial risk. A fake merchandise order or a fake donation form typically asks for a name, address, email, phone number, and payment details, the same data set a scammer needs to commit broader identity fraud later. The FBI’s PSA treats the data-harvesting angle and the direct financial-theft angle as two sides of the same operation, which matches a pattern cybersecurity teams have tracked for years: a single phishing-style touchpoint can monetize a victim twice, once immediately through a fraudulent charge and again later through resold PII.
Confirmed Election Scam Schemes at a Glance
The table below summarizes the schemes the FBI’s PSA explicitly describes, along with the delivery channel and the bureau’s stated guidance for each.
| Scheme | How It Works | Primary Risk | FBI Guidance |
|---|---|---|---|
| Fake voter registration alert | Message claims recipient is not registered, links to a spoofed state registration page | Theft of personally identifiable information | Verify status directly through a known state or federal election site |
| Guaranteed-return campaign investment | Pitch promises a payout from a candidate campaign pool after a win | Direct financial loss | Remember donations are not investments and cannot legally be returned with a profit |
| Fraudulent merchandise sales | Fake campaign stores take payment for items never shipped | Financial loss plus payment data exposure | Buy only through official, verified campaign channels |
| Fake donation solicitations | Messages impersonate a candidate’s name, image, or slogan to request funds | Financial loss routed to scammer accounts | Donate only through verified official campaign or FEC-linked channels |
| Unsolicited surveys and calls | Outreach via calls, texts, emails, or surveys collects data under a civic-engagement pretext | PII theft used for downstream fraud | Do not share PII with unknown or unsolicited contacts |
Why Election Cycles Attract Scammers
Election seasons compress a few conditions that fraud operators look for: heightened emotion, a hard deadline, a flood of legitimate solicitations that scam messages can hide inside, and a population that is actively expecting to be contacted about registration, donations, and candidate information. That combination is exactly why the FBI and other federal agencies have made a habit of issuing election-adjacent fraud warnings in past cycles, and why IC3 exists in the first place, as a centralized reporting channel the bureau can use to track patterns across thousands of individual complaints rather than relying on isolated police reports.
What is notable about the October 15 PSA is its timing relative to the calendar. Issuing the warning three weeks before the midterms gives it a shot at reaching people before the highest-volume window of real campaign communication, which tends to cluster in the final two weeks before Election Day. That is also the window in which a scam text is least likely to stand out against the backdrop of legitimate get-out-the-vote and fundraising messages, making early public warnings like this one more a matter of timing strategy than new technique.
A Pattern Beyond This One PSA: Other 2026 Takedowns
The FBI’s midterm scam warning does not exist in isolation. It lands in a year that has already seen major platform and law-enforcement action against large-scale fraud infrastructure. In October, X purged roughly 13,000 accounts tied to Iran, Russia, and China ahead of the midterms, a separate but related effort to limit influence-operation activity around the same election cycle this PSA is warning about. Earlier in the year, Microsoft and Japanese authorities dismantled a cybercrime network linked to roughly a billion dollars in scam activity, underscoring that the infrastructure behind consumer-facing fraud, call centers, spoofed domains, bulk SMS senders, is often shared across many different scam themes, not built fresh for each one.
Law enforcement has also been active on the suspect side of the fraud economy. The FBI separately arrested a former CYPFER executive in connection with a ShinyHunters-linked investigation, and named a suspect in a separate wiretapping case tied to a major AI lab. None of those cases are connected to the midterm election scams described in the October 15 PSA, but together they show a federal law-enforcement posture in 2026 that is treating data theft, impersonation fraud, and financial scams as a connected enforcement priority rather than isolated incidents. Even outside law enforcement, platforms have had to respond to related breach fallout, including a Discord bot breach that exposed 28 million accounts, a reminder that the PII scammers are after in election scams has plenty of other entry points, too.
What This Means for Tech Companies and Security Teams
For software and security teams, the FBI’s PSA is a useful trigger to re-check a few unglamorous but high-leverage controls. Email and SMS filtering vendors have a direct commercial stake here: every major midterm fraud wave becomes a short-term stress test for phishing-detection models, and vendors that catch new domain-registration patterns fastest, typosquats of state election-office URLs, newly registered “campaign donation” domains, tend to pick up enterprise and consumer trust in the following quarter. Identity-verification and PII-monitoring vendors also see a seasonal bump in interest, since the scams described in the PSA are fundamentally data-harvesting operations wearing a civic costume.
There is a second, quieter market angle: payment processors and donation-platform providers that service political campaigns. A surge of fraudulent donation pages and merchandise stores creates chargeback and fraud-liability exposure for any platform processing political payments at scale, and it raises the bar for know-your-customer checks on new “campaign” merchant accounts opened in the weeks before an election. None of this is unique to 2026, but the scale of midterm-era digital fundraising means the fraud surface has grown every cycle, even as the underlying scam scripts, as this PSA shows, stay largely the same.
How to Verify Before You Act
The FBI’s guidance boils down to a simple rule: never use the contact information or link embedded in an unsolicited message to verify that same message. Below is a quick reference for how that applies across the scenarios described in the PSA.
| Scenario | Risky Action | Safer Verification Step |
|---|---|---|
| Text says you are not registered to vote | Clicking the link in the text to “re-register” | Go directly to vote.gov or your state election office site |
| Email asks for a donation to a candidate pool | Entering payment details on the linked page | Navigate to the campaign’s official site independently and donate there |
| Call offers a guaranteed return on a campaign donation | Wiring funds to “lock in” the investment | Hang up; no legal donation structure returns a profit to the donor |
| Online ad sells candidate merchandise | Buying through an unfamiliar storefront link | Confirm the store is listed on the campaign’s verified official site |
| Survey requests personal details for a “voter profile” | Filling in name, address, and ID numbers | Decline unsolicited PII requests regardless of the stated purpose |
Trusted verification sources named in the FBI's PSA and related coverage:
- vote.gov (federal voter registration status and resources)
- Your state's official .gov election office site
- Federal Election Commission site (FEC.gov) for campaign finance questions
- IC3.gov for reporting suspected election-related fraudPredictions: What Comes Next Before Nov. 3
- Expect state election offices to echo the FBI’s warning with their own localized PSAs in the final two weeks before the midterms, mirroring how federal warnings typically cascade down to state-level communications.
- IC3 complaint volume tied to election-themed fraud will likely rise through late October and peak in the days immediately surrounding Election Day, based on the historical pattern of fraud reporting spiking around high-attention civic events.
- Email and SMS security vendors will likely publish their own midterm-specific threat advisories in the coming weeks, using the FBI’s PSA as a reference point to market phishing-detection improvements.
- Platforms that host political ads and fundraising pages will face renewed pressure to tighten verification on newly created “campaign” accounts, especially after the X account purge tied to foreign influence activity ahead of this same election.
- Additional law-enforcement actions against scam infrastructure, whether call centers, spoofed-domain operators, or bulk SMS senders, are plausible before the midterms conclude, continuing the enforcement pattern seen with the CYPFER and ShinyHunters-linked cases earlier in 2026.
Expert Perspective on the Warning
The FBI’s own language in the PSA is its clearest public messaging on the issue: “The FBI warns the public that scammers could exploit the 2026 US Midterm Election to perpetrate financial fraud schemes,” the bureau said in its October 15 announcement. It elaborated on the impersonation angle directly: “Scammers use the names, images, logos, and slogans of candidates to fraudulently solicit campaign contributions, sell merchandise that is never delivered, or steal personally identifiable information (PII) that can be used for other fraud,” the FBI said.
On the investment-style scheme specifically, the bureau was equally direct: “Campaign donations are not an investment and will not increase in value nor be returned,” the FBI said in the PSA. Outside commentary on the warning echoed the same core advice in more practical terms. Gannon, a cybersecurity official quoted in coverage of the warning from Help Net Security, framed the defense as a habit rather than a tool: “The best defense is a habit that every employee can adopt: when a message pressures you to act or provokes a strong reaction, pause and verify it through a source you find yourself, such as the Federal Election Commission (FEC) website or vote.gov, never through the link you were sent or using any information in the original text, email, or call,” Gannon said.
Protecting Yourself and Your Organization
For individual voters and donors, the FBI’s advice is unglamorous but effective: treat any unsolicited call, text, email, or survey about registration status or campaign donations with the same skepticism applied to a bank-fraud alert. Never provide PII to unknown contacts, and never click a link embedded in the original message to “verify” anything, since the link itself is usually the attack surface.
For organizations, especially campaign-adjacent vendors, payment processors, and communications platforms, the practical response looks a lot like standard anti-phishing hygiene applied to a seasonal spike: monitor for newly registered domains that mimic official election or campaign branding, flag donation forms that route to unfamiliar payment processors, and make sure customer-facing teams know how to route a user’s fraud report to IC3 rather than trying to resolve it internally. IT security teams supporting any organization with a public-facing donation or e-commerce flow should also expect a short-term rise in chargeback disputes tied to politically themed storefronts, a pattern that tends to follow every election-season fraud wave.
Reporting a Suspected Scam
The FBI’s PSA directs anyone who believes they have encountered one of these schemes to report it either to a local FBI field office or directly through the Internet Crime Complaint Center. IC3 reports feed into the FBI’s broader fraud-tracking efforts, which is how patterns like these midterm-specific scam scripts get identified and documented in the first place. Reporting matters even when no money changes hands, since a report describing a phishing text or a fake registration page helps the bureau map scam infrastructure before it scales further in the final weeks of the campaign.
Frequently Asked Questions
What did the FBI actually warn about on October 15, 2026?
The FBI issued a public-service announcement warning that scammers may exploit the 2026 U.S. midterm election to run financial fraud schemes, including fake voter-registration scams, guaranteed-return campaign investment pitches, fraudulent merchandise sales, and fake donation solicitations.
Is it true that a campaign donation can generate a return?
No. The FBI explicitly stated that campaign donations are not an investment and will not increase in value nor be returned. Any pitch claiming otherwise is fraudulent.
How does the fake voter registration scam work?
A message falsely claims the recipient is not registered to vote and directs them to a fake state voter-registration page designed to steal personally identifiable information.
Where should I check my voter registration status instead?
Use a known, independently located source such as vote.gov or your state’s official election office website rather than any link sent to you in a text, email, or call.
How do I report a suspected election-related scam?
The FBI recommends reporting it to a local FBI field office or through the Internet Crime Complaint Center at IC3.gov.
Are specific candidates or companies named as targets in the FBI’s warning?
No. The FBI’s PSA describes the fraud techniques generally and does not name specific candidates, companies, or individual victims.
Is this connected to the recent X account purge or other 2026 cybercrime takedowns?
Not directly. The FBI’s midterm scam PSA is a separate announcement from X’s removal of accounts tied to foreign influence operations and from unrelated law-enforcement actions against cybercrime networks, though all reflect heightened scrutiny of election-adjacent digital activity in 2026.
What should businesses that process political donations do in response?
Tighten verification on new campaign-related merchant accounts, monitor for spoofed donation domains, and ensure customer support teams know how to direct fraud reports to IC3.