Photo by BleepingComputer on BleepingComputer
What happened
The FBI issued a public warning that criminals are impersonating U.S. city and county planning/zoning officials in phishing campaigns.
According to the bureau, attackers are using publicly available permit details (like application numbers and property addresses) to make scam emails look legitimate, then demanding payment for fake permit-related fees.
How the scam works
- Victims receive unsolicited emails referencing real permit or zoning details.
- The message includes an invoice and pressure to pay quickly to avoid permit delays.
- Payment is requested through hard-to-recover channels, including:
- Wire transfer
- Peer-to-peer payment apps
- Cryptocurrency
Red flags to watch for
- Sender address is not an official government domain.
- Attachment asks you to “reply for more details” instead of directing you to a known official portal.
- Urgent payment demands tied to project timelines.
- Payment instructions that differ from your city/county’s usual process.
What to do if you receive one
- Do not pay from the email instructions.
- Verify any balance due using the city/county phone number or website you already trust.
- Report suspicious messages to the FBI IC3 (ic3.gov) with sender address, dates, and invoice amount.
- If money was sent, contact your bank/payment provider immediately and preserve all records.
Bottom line
This campaign works by mixing real public permit information with fake payment instructions. Treat all invoice requests tied to permits as untrusted until you independently verify through official government channels.