Money, explained for the rest of us.

Get our free daily email →

The FTC asked on September 24 whether online platforms should have to stop impersonation ads before anyone sees them, citing more than a million imposter-scam reports

By

Image Credit: Vitaly Gariev - Unsplash License/Unsplash

The Federal Trade Commission asked the public on September 24, 2026 whether online platforms should be required to stop impersonation ads before they ever reach consumers. The agency pointed to more than 1 million imposter-scam reports it received in 2025. It is a question, not a rule, and no new requirement for platforms exists yet.

The move matters to anyone who has clicked a sponsored ad and landed on a copycat version of a bank, a retailer or a government office. The FTC is asking whether the companies that sell and optimize those ads should carry some of the responsibility.

What the FTC is asking

In its September 24 announcement, the FTC says it is seeking comment through an advance notice of proposed rulemaking, a first step before any formal proposal. The notice asks to what extent ad-optimization tools offered by social media and search engines are furthering impersonation scams, and whether platforms should be required to stop impersonation ads from reaching consumers. Commissioners voted 2-0 to send it for publication.

The release quotes Christopher Mufarrige, director of the FTC’s Bureau of Consumer Protection. It also links to the agency’s existing Rule on Impersonation of Government and Businesses and says the FTC is considering whether to update that rule or take other action.

The rule already on the books is in 16 CFR Part 461, which bars impersonating government and businesses. It was published March 1, 2024. What the new notice adds is the platform side of the problem: who, besides the scammer, is responsible when a fake ad runs.

For anyone who shops, banks or looks up customer service numbers from a phone, the question is what to do if an ad has already led somewhere fake. Anyone who typed a password, a Social Security number or card details into a copycat site cannot wait for a rule to be written, and the protective steps have nothing to do with how the FTC’s question turns out.

Retirement deadlines, in your inbox: Miss an enrollment or claim deadline and the money can be gone. The Retirement Money Brief keeps you ahead of the ones that matter, every weekday.

Get the Retirement Money Brief →

We may earn a commission from links on this page.

The numbers behind the notice

According to the release, the FTC received more than 1 million imposter-scam reports in 2025, and consumers reported nearly $3.5 billion in losses. About 30 percent of the people who reported losing money said the first contact came on social media, with those losses reaching $2.1 billion.

Those are reports and losses as consumers described them, not court findings. They also cover every type of imposter scam, not only fake ads. Even so, they explain why the agency is looking at the place where many of these scams begin.

What is still undecided

The release says the notice is “to be published” in the Federal Register and gives no publication date. Comments are due 60 days after it is published. The comments will be posted on Regulations.gov, and the Federal Register notice carries the instructions for sending one.

The law firm Mayer Brown, in a September 29 analysis, lists what the FTC is weighing. Options include reviewing ads before they run, verifying advertisers, giving consumers a way to report fake ads, removing confirmed impersonation ads and disciplining advertisers who run them.

The same analysis notes the notice asks how much a platform must know or do before it is held liable. It also says a formal proposed rule cannot follow for at least 30 days after the notice is submitted to Congress, and that the process usually takes considerably longer than ordinary rulemaking. Its conclusion is that no new obligations are imminent.

The notice also invites comment on what an update would cost companies and small businesses, how it could affect artificial intelligence tools, and how it would overlap with other laws. Those questions suggest the agency expects pushback on how far any platform duty should go.

In other words, ad platforms are not under a new legal duty today, and a person who sees a suspicious ad tomorrow is in the same position as one who saw it last month.

What anyone can do after clicking a fake ad

The FTC’s reporting site, ReportFraud.ftc.gov, was showing a notice on October 19 that the service is unavailable because of the government shutdown, and that normal operations will resume when the government is funded. The notice points visitors to the FTC’s consumer advice site instead.

On that consumer site, the FTC explains credit freezes and fraud alerts. A freeze is placed by contacting all three credit bureaus, Equifax, Experian and TransUnion, and it is free to place or lift. While it is in place, nobody can open a new credit account in the person’s name, including the person, and it lasts until it is lifted.

A fraud alert is lighter. An initial alert lasts one year and can be renewed, and it needs a call to only one bureau, which must tell the other two. An extended alert lasts seven years but requires an FTC identity theft report or a police report. A freeze is the stronger lock, and a fraud alert is the quicker one to set up.

Someone who gave a fake site only a name and an email has far less at stake than someone who entered a Social Security number. Even then, the three bureau pages are worth bookmarking before the need comes up. The FTC article lists each bureau’s help page, and the government’s IdentityTheft.gov site has a general page of bureau contacts.

Clicked an ad that led to a fake company page?

The detail that gets missed is that a credit freeze has to be placed at all three bureaus, one at a time, and the FTC’s own report site is offline while the notice stays up. A fake-ad victim who freezes one file and stops leaves the other two open.

The Senior Fraud Defense & First-Hour Recovery Kit includes the free credit-freeze steps, part of a section on locking down what is left after a scam, alongside a first-hour recovery plan and a fraud evidence and report log. The log keeps the ad, the fake page and every call in one place, which helps if a bank or a bureau asks what happened.

Get the credit-freeze steps and report log for anyone who clicked a fake ad, with The Senior Fraud Defense & First-Hour Recovery Kit →


More Financial Reading

This article was produced with AI assistance and edited for accuracy against the sources linked above.


Spotted an error? Tell us at [email protected]. We fix mistakes fast and in the open — see how we work on our standards page.

Get the money news that affects your wallet — free, every weekday morning.