Back to security glossary

Security glossary

What are impersonation scams?

Impersonation scams happen when attackers pretend to be a trusted person, company, or support team to gain access or money.

Last reviewed: 2026-05-23

In plain English

Impersonation is powerful when attackers can reference real details from breaches or broker profiles.

Common examples include fake support agents, finance approvals, and urgent account-warning calls.

Many impersonation scams are social-engineering attacks, not technical hacks.

Real-world example

A scammer poses as your telecom provider and asks for a code to 'stop suspicious activity'.

What you should do

  • Treat unsolicited support outreach as untrusted by default.
  • Verify identity through official apps or published support channels.
  • Set team rules for payment and account-change approvals.
Check known breach and exposure signals

Related terms