Report
EN
Scam DatabaseScam NewsBlogStoriesGuidesRecoveryResourcesAboutDonateSign in
All briefings

Daily brief — July 18, 2026

Toll Texts, Pig-Butchering & Fake 'Recovery' Scams Surge

Three fraud patterns are actively hitting Americans right now — and AVASC's own case data lines up closely with new federal warnings.

Published July 18, 2026

Key points

  • Toll-text smishing is the single most-reported scam in AVASC's data this period, matching a documented 40% jump in government imposter reports nationally.
  • Pig-butchering crypto-romance scams are AVASC's highest-risk cluster; AI now lets criminal rings run thousands of fake relationships at once.
  • Federal enforcement is real and growing — including large fund seizures and thousands of proactive FBI victim notifications — but losses are still climbing faster than takedowns.
  • A second wave of scammers is now targeting people who were already defrauded, posing as 'recovery agents' from the FTC or FBI/IC3 and asking for upfront fees.
  • Task/'product rating' job scams are a fast-growing, lower-effort version of pig-butchering aimed at people who need extra income.

Toll-text scams remain the top imposter complaint

AVASC's database logged 520 reports of unpaid-toll smishing this period — our single largest cluster — with fake texts impersonating EZ-Pass, SunPass, FasTrak, and TxTag and linking to look-alike payment pages on odd TLDs. That matches federal data: the FTC says government imposter scams were up 40% in 2025, driven in large part by these toll texts, pushing total imposter losses to $3.5 billion. The FTC confirmed in May 2026 that fake toll payment texts are now the fastest-growing form of government imposter fraud in the country, contributing to a 40% spike in reports and pushing total imposter scam losses to $3.5 billion in 2025.

The pattern is consistent nationwide: these bogus messages might spoof real toll collection programs (like EZ-Pass, SunPass, FasTrak, and TxTag) to seem more credible, and they threaten to charge you late fees or suspend your vehicle's registration if you don't pay right away. If you weren't near a toll road, treat the text as fake.

AI-run 'pig-butchering' crypto cons keep growing despite record busts

AVASC rated pig-butchering (romance-turned-crypto-investment) scams CRITICAL this period, our highest risk level, with 340 reports describing AI-run grooming chats that funnel victims into fake exchange apps and sites. Enforcement is intensifying in parallel: these defendants allegedly engaged in cryptocurrency investment fraud schemes through 'pig-butchering,' a type of fraud where scammers gain a victim's trust over time – through friendship or romance – before persuading them to send money to fake investments which the scammers then take. The FBI's proactive-notification program has had real impact: Operation Level Up—which began in 2024 as a San Diego and Phoenix joint initiative—has proactively identified and notified victims of cryptocurrency investment fraud schemes, and as of April 2026, the FBI notified almost 9,000 victims and saved victims an estimated $562 million.

Even so, the underlying scale is enormous: Chainalysis estimates crypto scams generated more than $17 billion in losses in 2025, with impersonation scams growing more than 1,400% year over year, driven in part by AI tools, and AI-enabled scams generated 4.5 times more revenue per operation than traditional scams. If a withdrawal is blocked behind a 'fee' or 'tax,' that's the scam revealing itself — stop sending money and report it.

Watch for fake 'recovery' agents targeting past victims

AVASC is also seeing a distinct, related pattern: scammers re-approaching people who already lost money, posing as government or FBI/IC3 fund-recovery agents. This tracks with a fresh FTC warning: the FTC warns that scammers are keeping "sucker lists" to repeatedly target previous fraud victims with fake recovery offers and upfront fees. The FBI has separately confirmed impersonators posing as its own complaint center: the IC3 will not ask for payment to recover lost funds, nor will they refer a victim to a company requesting payment for recovering funds.

Alongside this, AVASC logged 210 reports of task/'product rating' job scams, a lighter, faster cousin of pig-butchering that lures people who need income with small payouts before demanding a deposit to 'unlock' earnings. The FTC has flagged the same tactic in a new alert: the (fake) recruiters claim to be with legit companies you might know and say they're hiring for remote jobs, and eventually they'll ask you to deposit your own money.

Protect yourself

  • Never click links in unexpected toll, delivery, or 'traffic violation' texts — go directly to the agency's official site or a phone number you already trust.
  • Treat any request to pay a 'fee' or 'tax' to unlock your own crypto withdrawal as a hard stop sign — legitimate platforms never work that way.
  • The real FBI/IC3 and FTC will never ask you to pay upfront to recover money you lost — hang up or ignore anyone who does, no matter how official they sound.
  • Be wary of unsolicited 'job' offers on WhatsApp, Telegram, or text that pay you to rate products or videos, especially if you're later asked to deposit your own money.
  • If you're rebuilding trust with someone you met online who introduces a crypto 'investment,' pause and verify independently before sending anything.
  • Report suspicious texts, calls, and offers: forward smishing texts to 7726 (SPAM), and file crypto or recovery-scam reports at ic3.gov or ReportFraud.ftc.gov.

Sources

Think you've been targeted by a scam?

Reporting takes just a few minutes. It helps us warn others, strengthens the scam database, and connects you to recovery resources.

Report a scamRecovery resources
This briefing is public-safe intelligence: it surfaces only indicators and patterns that are already public, alongside protective guidance — never a playbook for scammers. AVASC is not a law firm, investigator, or government agency, and this is not legal or financial advice. If you've been targeted, you can report a scam or explore recovery resources.