The FTC impersonation rule, codified at 16 CFR Part 461, makes it an unfair or deceptive practice to falsely pose as a government entity, a business, or an officer of either in commercial dealings. Finalized in March 2024, it lets the Federal Trade Commission seek civil penalties of up to $53,088 per violation and pursue refunds for victims in federal court. Reported losses to impersonation fraud reached $2.95 billion in 2024.1Federal Trade Commission. New FTC Data Show a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024
Why the Rule Exists
For decades the FTC used Section 13(b) of the FTC Act to sue scammers in federal court and win money back for consumers. In 2021 the Supreme Court held in AMG Capital Management v. FTC that Section 13(b) does not authorize monetary relief such as restitution or disgorgement.2Supreme Court of the United States. AMG Capital Management, LLC v. Federal Trade Commission That decision cut off the agency’s fastest route to recovering stolen funds.
Part 461, published in the Federal Register on March 1, 2024, fills part of the gap.3eCFR. 16 CFR Part 461 – Rule on Impersonation of Government and Businesses Because it is a formal trade regulation rule, the FTC can now pursue civil penalties under Section 5(m)(1)(A) for impersonation violations, and it can go directly to court under Section 19 to obtain consumer redress.4Federal Trade Commission. A Brief Overview of the Federal Trade Commission’s Investigative, Law Enforcement, and Rulemaking Authority
What Counts as Government Impersonation
Section 461.2 prohibits falsely posing as a government entity or officer, and misrepresenting an affiliation with, endorsement by, or sponsorship from one.5eCFR. 16 CFR 461.2 – Impersonation of Government Prohibited The rule’s definition of “government” reaches federal, state, local, and tribal entities along with their departments and agencies.3eCFR. 16 CFR Part 461 – Rule on Impersonation of Government and Businesses It doesn’t matter whether the scammer claims to be from the IRS, a state tax authority, a county sheriff’s office, or a tribal agency.
Both direct claims and indirect suggestions of government authority count. A caller saying “I’m from the Social Security Administration” is covered. So is the use of logos, letterhead, or email addresses designed to mimic official communications. Fake tax notices demanding immediate payment, spoofed caller IDs displaying government numbers, and phishing emails crafted to look like they come from .gov domains all fit the pattern. The false representation has to be “material,” meaning likely to influence a consumer’s decisions about goods, services, or payments.
What Counts as Business Impersonation
Section 461.3 applies the same framework to the private sector, prohibiting falsely posing as a business or its officer and misrepresenting affiliation with or endorsement by a business.6eCFR. 16 CFR 461.3 – Impersonation of Businesses Prohibited “Business” is defined broadly: any corporation, partnership, association, or other entity that provides goods or services, including not-for-profit organizations. Charities and community groups get the same protection as major corporations. Impersonating a local food bank to collect donations is covered.
“Officer” reaches executives, employees, and agents, not just senior leadership. Tech support scams claiming to represent a well-known software company, fake package delivery notifications using retailer branding, and phishing messages mimicking a bank’s customer service all fall within the rule when they’re materially misleading.
What the Rule Does Not Reach
The rule applies to conduct “in or affecting commerce.” Non-commercial speech falls outside its scope. The FTC has explicitly said artistic or recreational costumery, political speech, parody, and satire are not covered.7Federal Trade Commission. Trade Regulation Rule on Impersonation of Government and Businesses A political ad that parodies a brand or a comedian wearing a fake government uniform on stage wouldn’t trigger liability.
The rule also does not create liability for third parties who supply tools used in impersonation fraud. During rulemaking the FTC proposed a “means and instrumentalities” provision that would have reached providers of spoofing software, scam scripts, and lead lists. The Commission declined to finalize it, concluding the concept “warrants further analysis and consideration.”8Federal Register. Trade Regulation Rule on Impersonation of Government and Businesses A December 2024 supplemental rulemaking reached the same result.9Federal Register. Trade Regulation Rule on Impersonation of Government and Businesses Part 461 contains only three substantive sections: definitions, government impersonation, and business impersonation. The FTC can still pursue enablers under its general Section 5 authority case by case, but the rule itself provides no separate cause of action against them.
Impersonation of an individual private person is not covered either. In February 2024 the FTC issued a supplemental notice proposing to extend the rule to individuals, citing AI voice cloning and deepfakes as technologies that “threaten to turbocharge” fraud.10Federal Trade Commission. FTC Proposes New Protections to Combat AI Impersonation of Individuals That expansion has not been finalized. As of the current eCFR text, only government and business impersonation are covered.
Civil Penalties
The FTC enforces the rule through Section 5(m)(1)(A) of the FTC Act, which authorizes civil penalties for knowing violations of trade regulation rules.4Federal Trade Commission. A Brief Overview of the Federal Trade Commission’s Investigative, Law Enforcement, and Rulemaking Authority The agency must show the violator had actual knowledge, or knowledge fairly implied from the circumstances, that the conduct was unfair or deceptive and prohibited by the rule.7Federal Trade Commission. Trade Regulation Rule on Impersonation of Government and Businesses For most impersonation schemes, that standard is easily met.
The maximum penalty is $53,088 per violation as of the January 2025 inflation adjustment, up from $51,744 the year before.11Federal Register. Adjustments to Civil Penalty Amounts The figure adjusts every year under 16 CFR ยง 1.98.12eCFR. 16 CFR 1.98 – Adjustments to Civil Penalty Amounts Continuing violations stack: each day of noncompliance counts as a separate offense.13Office of the Law Revision Counsel. 15 U.S. Code 45 – Unfair Methods of Competition Unlawful; Prevention by Commission A robocall operation running for 30 days could face more than $1.5 million from that calculation alone, before penalties tied to individual consumers contacted.
Individual liability follows existing FTC Act standards. Executives, employees, and agents who participate in or direct a scheme can be held personally liable. The rule’s broad definition of “officer” reaches anyone acting on behalf of the entity, not just senior management.7Federal Trade Commission. Trade Regulation Rule on Impersonation of Government and Businesses
Consumer Refunds
Civil penalties go to the U.S. Treasury, not to victims. To return money to consumers, the FTC uses Section 19 of the FTC Act, which authorizes the agency to seek redress in federal court for violations of a trade regulation rule.2Supreme Court of the United States. AMG Capital Management, LLC v. Federal Trade Commission This is the tool that survived the AMG Capital decision. The FTC can pursue refunds, asset freezes, and injunctions to stop ongoing fraud. Section 19 carries a three-year statute of limitations measured from the underlying violation, so how quickly the agency acts, and how quickly consumers report, both matter.
AI Deepfakes and Voice Cloning
Although the individual-impersonation expansion is still pending, scammers who use AI to impersonate a government official or a business representative already violate Part 461. The FTC has been direct that “there is no AI exemption from the laws on the books,” a message it drove home with Operation AI Comply in September 2024, a sweep targeting companies using artificial intelligence to deceive consumers.14Federal Trade Commission. FTC Announces Crackdown on Deceptive AI Claims and Schemes A cloned voice claiming to be from the IRS is government impersonation. A deepfake video of a bank executive is business impersonation. The technology used to generate the deception doesn’t change the analysis.
How to Report an Impersonation Scam
If you’ve encountered an impersonation scam, report it at ReportFraud.ftc.gov. Describe what happened, share whatever details you have about the scammer (name, contact information, payment amounts, dates), and submit.15Federal Trade Commission. Report Fraud You can share as much or as little personal information as you’re comfortable with.16Federal Trade Commission. ReportFraud.ftc.gov – FAQ
The FTC won’t investigate your individual case. Reports feed Consumer Sentinel, a secure database shared with more than 2,000 law enforcement agencies that the FTC uses to spot patterns and build cases against large-scale operations.15Federal Trade Commission. Report Fraud Even attempts that cost you nothing are worth reporting. They help investigators track emerging tactics and decide where to focus.