FBI Warns of Sophisticated Phishing Scam Targeting U.S. Permit Applicants
The FBI has issued an alert about a widespread phishing campaign targeting individuals and businesses applying for land-use permits across the U.S. Cybercriminals are impersonating government officials, sending fraudulent emails demanding payments for fake permit fees via wire transfers or cryptocurrency.
The scam emails are highly convincing, often including accurate details such as property addresses, case numbers, and the names of real city or county officials. Attackers use publicly available permit data to craft realistic messages, complete with official-looking letterhead, professional language, and references to zoning regulations and compliance procedures. Some emails even create false urgency with threats of penalties or delays.
The FBI noted that many malicious emails use deceptive domains like "@usa.com" instead of legitimate ".gov" addresses. Victims are advised to verify communications by cross-checking official city or county websites and contacting listed phone numbers directly.
This scheme is part of a broader surge in cybercrime, with U.S. victims losing over $12 billion in 2024 alone. Authorities are ramping up efforts to dismantle criminal networks and recover stolen funds. Additionally, AI tools are being exploited by scammers to refine phishing emails, making them more persuasive even for non-English speakers.
Source: https://therecord.media/cybercriminals-impersonate-city-officials-permit-payments
PermitFlow cybersecurity rating report: https://www.rankiteo.com/company/permitflow
"id": "PER1773152688",
"linkid": "permitflow",
"type": "Cyber Attack",
"date": "3/2026",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Government Permit Applicants',
'location': 'U.S.',
'type': ['Individuals', 'Businesses']}],
'attack_vector': 'Email',
'customer_advisories': 'Victims are advised to verify communications by '
'cross-checking official city or county websites and '
'contacting listed phone numbers directly.',
'description': 'The FBI has issued an alert about a widespread phishing '
'campaign targeting individuals and businesses applying for '
'land-use permits across the U.S. Cybercriminals are '
'impersonating government officials, sending fraudulent emails '
'demanding payments for fake permit fees via wire transfers or '
'cryptocurrency. The scam emails are highly convincing, often '
'including accurate details such as property addresses, case '
'numbers, and the names of real city or county officials. '
'Attackers use publicly available permit data to craft '
'realistic messages, complete with official-looking '
'letterhead, professional language, and references to zoning '
'regulations and compliance procedures. Some emails even '
'create false urgency with threats of penalties or delays.',
'impact': {'financial_loss': '$12 billion (U.S. victims in 2024)'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Verify communications by cross-checking official city or '
'county websites and contacting listed phone numbers '
'directly. Be cautious of deceptive domains and '
'AI-enhanced phishing emails.',
'motivation': 'Financial Gain',
'post_incident_analysis': {'root_causes': 'Use of publicly available permit '
'data and AI tools to craft '
'convincing phishing emails. '
'Exploitation of social engineering '
'tactics and deceptive domains.'},
'recommendations': 'Use official government websites and verified contact '
'information to confirm the legitimacy of permit-related '
'communications. Report suspicious emails to the FBI.',
'references': [{'source': 'FBI Alert'}],
'response': {'communication_strategy': 'Public alert and advisory',
'law_enforcement_notified': 'FBI'},
'stakeholder_advisories': 'Authorities are ramping up efforts to dismantle '
'criminal networks and recover stolen funds.',
'threat_actor': 'Cybercriminals',
'title': 'FBI Warns of Sophisticated Phishing Scam Targeting U.S. Permit '
'Applicants',
'type': 'Phishing',
'vulnerability_exploited': 'Social Engineering'}