خسائر قرصنة الشبح ضربت 2.1 بليون دولار كما تقول المباحث الفيدرالية الضحايا

The caller is not in your computer. The “banker” is not at your bank. The “federal agent” on the second line does not work for the United States. Those three voices are the Phantom Hacker scam, and the Federal Bureau of Investigation now puts the damage above $2.1 billion. Older adults take most of the hits. The money leaves because the victim moves it.

That last point is the whole design. There is no smash-and-grab on the core processor at a credit union. There is a pop-up, a remote-access tool, a second actor who claims an overseas crew is already inside the account, and a third actor who sends fake letterhead and tells the customer to “protect” the balance by wiring it to a holding account that does not belong to the Federal Reserve. By the time the real bank picks up the phone, the wire is gone. (مركز شكاوى الجرائم على الإنترنت)

In August 2026 the figure that had sat at “more than $1 billion since 2024” jumped again in FBI-briefed coverage. Retirement plans, credit unions, and state attorneys general had already been reprinting the warning. The new number is why The AEGIS Alliance is rewriting this file: the same three-act play is still running, and the take has doubled from the early public estimates.

القانون الأول هو البوب الذي يبدو مثل ميكروسوفت

Phase one is dressed as tech support. A window locks the browser. A text or an email claims the machine is infected. A number on the screen offers help. The person who answers walks the target through installing remote-access software — AnyDesk, TeamViewer, a lookalike with a name that sounds like a help desk. Once the session is live, the operator “checks” bank and brokerage pages for “fraudulent charges.” What the operator is actually doing is inventory. The richest account gets marked for the next call. (WAPT, اتحاد الائتمانات الاتحادية الآمنة)

لا شيء عن تلك الساعة الأولى يجب أن يبدو مجرما للشخص على الكرسي النبرة هادئة وتظهر حصة الشاشة أرصدة حقيقية. القصة هي أن شخصاً آخر اخترق الجهاز الخوف يفعل الباقي

القانون الثاني هو المصرفي الذي يريد سلك

Phase two arrives as a separate voice, often on a different number, claiming to represent the victim’s bank, credit union, or brokerage. The script says an overseas hacker is siphoning the account and the only safe move is to transfer funds into a “secure” account controlled by the Federal Reserve, the Treasury, or a “recovery unit.” The transfers are paced. A single six-figure wire can trip a hold. Five smaller wires over a week look like a customer who is being careful. Cash drop-offs and cryptocurrency conversions show up when the bank starts asking questions. (الأخبار 5 كليفلاند, محامي نيويورك)

New York’s attorney general put the same sequence in a statewide alert aimed at seniors. Credit unions have been repeating a shorter version of the same sentence: no legitimate institution will ask you to move money to keep it safe. The sentence is easy to print. It is hard to remember when a stranger is watching your screen and a second stranger is reading your routing number back to you.

القانون الثالث هو شارة ليست شارة

Phase three is the closer. Someone claiming to be from the FBI, the Secret Service, or another federal shop sends documents on mocked-up letterhead and tells the victim the window to “secure” the funds is closing. Spoofed caller ID makes the inbound number look local or official. AI voice tools now let the crew match a tone that sounds like a prior call. The Independent and other outlets that recapped the FBI warning in 2025 already flagged older adults as the primary mark. The August 2026 loss figure did not change the method. It confirmed that the method scales. (The Independent)

العميل (تشارلز جونستون) من المباحث الفيدرالية، يتحدث إلى تلفزيون (كليفلاند) ويضع علم النفس في خط واحد: "يبدوا شرعيين جداً، وعندما يعتقد الضحية أن حساباتهم المالية في خطر، هم على استعداد لاتخاذ الخطوات التي قد لا يتخذونها إذا ظنوا ذلك من خلال".

الخدعة تجلس داخل سنة التزوير

Phantom Hacker is a specialty product inside a larger market. The FBI’s Internet Crime Complaint Center logged more than a million complaints in its most recent annual report, with reported losses of $20.9 billion — a 26 percent jump. People 60 and older reported about $7.7 billion of that, a roughly 60 percent year-over-year increase, and they filed more complaints than any other age group. (AARP)

The bureau separately tied about $893 million in losses to AI-enabled fraud, including cloned voices in “family in distress” calls and deepfakes in investment pitches. Older adults accounted for roughly $352 million of the AI slice. Phantom Hacker crews use the same toolkit: a voice that sounds official, a number that looks official, and a story that makes hanging up feel like negligence. (مكتب التحقيقات الفدرالي)

وقد أنفق مرشدون وغيرهم من مديري التقاعد في آب/أغسطس 2026 من أعضاء التحذير مرة أخرى بعد تعميم الرقم البالغ 2.1 بليون دولار. هذا ليس مخطط جديد إنه نفس المخطط مع إيصال أكبرGuideStone)

تحالف (إيغيس) قد تعقّب مراك الجيران على هذه الضربة دفتر دفتر شاشات رومانسية وضعته شركة FTC 1.3 بليون دولار.. بريد (إيرس إيمبوستور) الذي أسقط أدوات الوصول عن بعد على 29 ألف صندوقو 700 خرق اعتمادي يضع أرقام الضمان الاجتماعي من قطع السيارات في عملية مطالباتأبواب مختلفة نفس النتيجة شخص آخر ينتهي به المطاف بمسك الحساب

الذي في الحقيقة يوقف السلك

Do not call the number on a pop-up. Do not install software because a stranger said the machine is sick. Do not grant remote access to “check for fraud.” If a message claims your bank is on the line, hang up and dial the number on the back of the card or on a statement you already own. A real bank will not ask you to buy gift cards, convert savings to crypto, or send a wire to the Federal Reserve to “protect” a balance.

إذا كان جهاز تنصت بالفعل، الساعة هي الصديق الوحيد المتبقي. أطلب من المؤسسة الموفدة أن تتذكّر ورسالة غير مؤذية في نفس اليوم ويذكّر البعض بالعمل. وأغلبها لا يفعل ذلك إذا كان حساب الاستلام قد أفرغ بالفعل في خلاط أو سلسلة بغل.

اطير مع مكتب التحقيقات الفدرالي في IC3.gov. People 60 and older can also call the Justice Department’s Elder Fraud Hotline at 1-833-372-8311. AARP’s Fraud Watch Network Helpline at 877-908-3360 puts a trained specialist on the line without a sales pitch. State attorneys general take reports as well, and a credit freeze at Equifax, Experian, and TransUnion is cheap insurance after any session in which a stranger watched a screen full of account numbers.

The FBI has used Operation Level Up to warn people who appear to be mid-scam, an effort it credits with cutting losses by hundreds of millions of dollars. Operation Winter SHIELD is the follow-on hardening campaign for households and shops that keep getting impersonation calls. Those programs exist because the complaint queue is no longer a trickle.

لماذا تلائم علامة "التفاف"

The hacker in the story is a prop. The account was not drained by a zero-day on the core banking switch. It was drained by a customer who was told the drain was already happening and that the only fix was to finish the job. That is why banks lose these fights in the dispute process. The customer authenticated the transfer.

Spoofed IDs and cloned voices make the old advice — “if it sounds wrong, hang up” — harder to apply. The voice can sound exactly like the last person who called. The number can look exactly like the branch. The document can look exactly like a federal seal. The tell is not the production quality. The tell is the request: move the money somewhere new, right now, and do not call anyone else first.

Two billion dollars is not a rounding error in a retirement system. It is a transfer of life savings from people who answered a pop-up to crews that never touched a bank vault. The AEGIS Alliance will keep the warning on this URL because the method has not changed and the total is still climbing. If a window locks your screen today, the safest next click is the power button, not the phone number in the corner.