Federal and state officials are sounding the alarm over a slick, fast-moving fraud dubbed the "Phantom Hacker" that investigators say has quietly drained more than $1 billion from Americans since 2024. The three-stage con strings together fake tech-support pop-ups, spoofed bank calls and bogus government agents to bully victims, often older New Yorkers, into shifting their life savings into accounts secretly controlled by scammers.
In a recent consumer alert, the Office of the New York State Attorney General warned that criminals using the "Phantom Hacker" playbook are zeroing in on people "nearing or over their retirement age" and have already grabbed "over $1 billion" nationwide. The alert sticks to some basic but crucial advice: never let a stranger take remote control of your devices and never move money because someone on the phone tells you to.
How the 'Phantom Hacker' ruse plays out
The FBI describes the scam as a coordinated, tag-team attack. First, a fake tech-support rep lures a target into installing remote-access software. Next, a second caller posing as the victim’s bank leans on that access and newly stolen account details. Finally, a supposed federal agent orders the victim to transfer money into what is pitched as a "safe" government account that is, in reality, just another criminal stash. Scammers often warn victims not to talk to family or bank staff and may back up the story with phony letters or official-looking emails, according to FBI Phoenix.
Why the calls are so convincing
Security analysts say the crooks are mixing old-school scare tactics with new tech. Spoofed caller ID, stolen personal data, generative AI and polished scripts can make voices, messages and documents sound convincingly official. The FBI's Internet Crime Complaint Center logged record cybercrime losses last year, according to the IC3 annual report. People over 60 took the biggest financial hit, a trend highlighted in recent coverage by Forbes, which notes that AI tools are making impostor scams tougher to spot.
How to protect yourself
Officials keep coming back to three simple rules: do not let unknown callers take remote control of your phone or computer, never share PINs or one-time passcodes and refuse any request to move money at someone else's insistence. New York's consumer alert from the Office of the New York State Attorney General repeats those warnings. Federal guidance points victims and families to the National Elder Fraud Hotline (1-833-FRAUD-11) for support, as outlined in the Department of Justice's elder-fraud resources.
Report It
If you think you or someone you care for has been targeted, officials want to hear about it. Filing a report helps investigators track patterns and, sometimes, freeze stolen funds before they vanish for good. Complaints can be submitted through the FBI's Internet Crime Complaint Center or the Federal Trade Commission's fraud portal at IC3 or ReportFraud.ftc.gov.
New York's warning is a reminder that scams now mash up high-tech tricks with old-fashioned pressure tactics. If someone in your household gets an urgent pop-up or a surprise one-ring call about "security issues," hang up, take a breath and check with a trusted family member or call your bank using the number on the back of your card, not the one a stranger gives you.
