The FBI's New York office has warned TRON users to treat any token claiming a link to the agency as suspicious. In a notice posted through its official X account, the office said such tokens are not issued by the FBI, and users should avoid related websites and never submit personally identifiable information.
Fake FBI-branded TRC20 tokens are being used as phishing bait
Available details point to a scam built around fake FBI-themed tokens on the TRON network. These assets are not designed for trading or investment. Their real purpose is to place an apparent law-enforcement label inside a user's wallet, then push the target toward a phishing site or message flow tied to the token.
In its alert issued on the 19th, the FBI's New York office said scammers are exploiting the ease of token issuance on blockchain networks. The token itself becomes the lure. Once a user notices an asset with a name that appears connected to a federal agency, the next step is often a message claiming the wallet is under anti-money laundering, or AML, review and that assets could be frozen unless the user responds quickly.
The scheme appears to work in two stages
Based on the information disclosed so far, the scam includes at least two layers. First, the fake token is sent directly to a victim's TRON wallet so it appears in the asset list. Second, linked websites or follow-up messages pressure the victim to hand over identity details, and in some cases wallet-related information, under the pretense of compliance checks.
The immediate goal is not limited to stealing crypto. The websites and token branding are mainly aimed at collecting personal data that can directly identify an individual. That raises the risk of later identity theft, social engineering attacks, and wider financial fraud beyond the original wallet interaction.
Official warning shows law enforcement is tracking the tactic
The notice signals that US law enforcement has identified a phishing pattern that uses natively issued blockchain assets as an entry point. For TRON users, a token carrying an official-sounding name should not be treated as a legitimate notice or enforcement action. If a linked page asks for personal information, the safest response is to avoid the link and provide nothing.