The United States Federal Bureau of Investigation (FBI) has released a critical security alert regarding a new phishing scam targeting users of the Tron (TRX) blockchain. The scam involves the distribution of counterfeit tokens named 'FBI Token', which appear in users' wallets alongside messages falsely claiming their wallets are 'under investigation' and must complete an Anti-Money Laundering (AML) verification process to avoid asset freezing. The messages include links to a phishing website designed to collect private keys, seed phrases, and identity documents.
How the Scam Works
Attackers exploit Tron's ability to send token transfers with embedded metadata. When victims view their wallet balances, they see the fake token and its accompanying text, which closely mimics official FBI communications. The FBI emphasized that it does not issue any digital tokens and will never request identity verification through token transfers or wallet messages. The bureau warned that any interaction with such tokens—including viewing, approving contract claims, or clicking links—could expose victims to data theft or fund loss.
Recommended Actions
The FBI advises all Tron users to take the following precautions: Do not interact with any unknown tokens claiming to be from the FBI; do not click on embedded links; and never provide private keys, seed phrases, or personal information through any website linked by such tokens. Those who have already engaged with the scam should generate a new wallet immediately and report the incident to the Internet Crime Complaint Center (IC3). Additionally, users are encouraged to use blockchain explorers like Tronscan to verify the contract address legitimacy before any token interaction.
Broader Context: Rising Phishing Sophistication
This warning comes amid a surge in crypto phishing attacks that exploit the trust in government agencies. Similar campaigns have previously spoofed the SEC and other regulatory bodies, leveraging low-fee blockchains like Tron to reach a wide audience. Data from security firms shows that phishing incidents involving fake tokens caused user losses exceeding $120 million in Q2 2026 alone. Attackers are increasingly using automated smart contracts to deploy phishing tokens at scale, making it harder for users to distinguish legitimate notifications from scams.
User Self-Protection Tips
To safeguard assets, the FBI recommends adopting a zero-trust approach to any unsolicited token received in wallets. Always verify claims through official sources—visit the FBI's official website or contact your exchange's support team before acting. Use hardware wallets for long-term storage, install anti-phishing browser extensions, and regularly review token approvals. Tron-related applications should also implement warning systems for newly created tokens. While the Tron Foundation has not yet released an official statement, multiple blockchain security firms have flagged the scam contract address as malicious.
Conclusion: The fake FBI token scam is a stark reminder that crypto users must remain vigilant against increasingly sophisticated social engineering attacks. By understanding the tactics and following official guidelines, investors can better protect their digital assets from such schemes.