Back Office BeatSubscribe

Published by J9 Systems. What's new in business tech, and what it means for yours.

From the brief of Friday, October 30, 2026 · No. 17

From the daily brief · Policy

FTC logs 14 imposter cases and $80M in redress; set a callback rule for bill pay

The direct effect on your business is small, but every case relied on a false government or company affiliation, the same trick aimed at staff who pay bills.

By Carter Josephson · · 2 min read

What happened

On Oct. 29, 2026, the FTC said that since its Impersonation Rule took effect in 2024 it has completed 14 enforcement actions returning more than $80 million to consumers, and that domain registrars took down 19 FTC-imposter websites after agency letters. Violators can owe refunds and civil penalties of up to $53,088 per violation, and in September the FTC asked for public comment on whether to extend the rule to platforms whose ad tools help scammers.

What it means for a 10-to-50-person business

The direct effect on your business is small. There is no new filing and no new rule to comply with, and the $80 million goes to consumers, not businesses. The useful part is the pattern. Every case on the FTC's list relied on a false claim of being, or being tied to, a government agency or a known company. The removed sites used lookalike names such as fttc.us and FTC-help.com. Take an 18-person plumbing shop whose office manager pays about 40 supplier invoices a month. A caller says he is from the supply house, the bank details have changed, and the next $6,000 payment should go to a new account. Under a callback rule, any change to payment details, or any agency demand for money, gets verified by calling a number already on file. That takes about five minutes per request. One redirected payment costs the full $6,000, and you may not get it back. Also check that your own ads and lead vendors do not imply government ties. A phrase like "state rebate program" is the kind of claim to look for. Shops that already have a written callback rule can skip this item.

What to do
Try it

This month, write a one-paragraph rule that anyone who pays bills must verify requests to change bank details, and any caller claiming to be the IRS, a state agency, a supplier or your bank, by calling back a number already on file, then walk office staff through it in 15 minutes.

What it costs
What it costs
Writing the callback rule
1 hr (≈ $50 at $50/hr)
Staff walkthrough, assume 4 office staff × 15 min
1 hr (≈ $50 at $50/hr)
Callback checks, assume 5 requests/mo × 5 min
25 min/mo
New software
$0; none required
Doing nothing
$0 now; one redirected supplier payment (assume $6,000) may not be recoverable
Sources
ftc.gov (primary) · FTC: Report fraud, scams and bad business practices · FTC Consumer Advice: Scams

Questions owners ask

Does the Impersonation Rule require my business to file or change anything?

No. The FTC release describes enforcement against impersonators. The only exposure for a legitimate business is falsely claiming to be, or to be affiliated with, a government agency or another company, which can bring refunds and penalties of up to $53,088 per violation.

What if someone impersonates my company to customers?

The rule covers impersonating businesses as well as government agencies. You can report it at ReportFraud.ftc.gov.

Will the FTC ever call demanding payment?

The FTC says it will never demand money, make threats, tell you to transfer money or promise you a prize.

Three to five of these, every weekday morning.

Related