Someone Texted Me a Photo of Their ID to Prove They're Real. Should I Trust It?
TL;DR
- A photo of an ID or badge sent by text is not proof of anything, because anyone can fake, download, or generate an image in seconds.
- The FTC warned on June 3, 2026 that scammers now text photos of fake employee IDs and badges to pose as government “agents,” often to people who were already scammed once.
- Real government agencies don’t cold-text you, don’t send ID photos to “verify” themselves, and never ask you to pay them or move your money to a safe account.
- If you get one of these, don’t reply and don’t use any number they gave you. Look up the agency yourself and call the number on its official site.
- One step today on iPhone: open the message, tap the number, tap Block this Caller, then forward the text to 7726 to report it.
A message lands from a number you don’t recognize. The person says they’re an agent with the FTC, or the Social Security office, or your bank’s fraud team. You’re skeptical, which is the right instinct. So they do the thing that flips a lot of people: they text you a photo of their employee ID. Badge, headshot, agency seal, an ID number, the works. It looks official. Now you’re second-guessing yourself.
Don’t. That photo is the tell, not the proof.
Why a photo of an ID proves absolutely nothing
Think about what a photo actually is. It’s an image file. Anyone can save one, crop one, edit one, or spin one up from scratch with the same design tools a graphic artist uses. A convincing government ID is a template and twenty minutes. With today’s image generators it’s less than that.
So when someone sends you a picture of their credentials, they haven’t verified anything. They’ve handed you a file. A real badge sitting in front of a real agent’s face on a video call still wouldn’t mean much, and a JPEG in your texts means even less. The whole move works on a gut assumption: surely no scammer would go to the trouble of making a fake ID. They absolutely would. It costs them nothing and it’s the single most effective way to shut down your doubt at the exact moment you were about to hang up.
Here’s the rule worth memorizing. Identity is never something the other person proves to you by sending you something. You verify it yourself, by contacting the organization through a number or website you looked up independently. Anything they send, badge, ID, official-looking letter, a case number, is just part of the costume.
The version the FTC is warning about right now
This isn’t hypothetical. On June 3, 2026 the FTC published an alert with a blunt title: a real FTC employee won’t text you their photo ID to “verify” their identity. News outlets picked it up through July as reports kept coming in.
The script goes like this. You get an unexpected message from a contact you don’t know. The person claims to be an FTC employee or “agent” and says they can help you recover money you lost in an earlier scam. To earn your trust, they text a photo of an employee ID and a badge. All fake. It’s a refund and recovery scam, and it’s aimed squarely at people who were already burned once and are still hoping to get their money back. If that’s you, we wrote a separate guide on what to do after a scam and the recovery scam that follows.
The FTC laid out three things a real employee will never do, and they double as a checklist for any agency:
A real FTC employee won’t contact you out of the blue by text message or an app like WhatsApp. A real employee won’t text a photo of their ID to prove who they are. And a real employee won’t offer to recover your lost money and then ask you to pay a fee, move your money into an account they name, or hand over your financial details.
Swap “FTC” for “Social Security,” “Medicare,” “your bank,” or “the police” and the checklist still holds.
This fits a much bigger pattern
Impersonation is the machine behind most fraud right now. The FTC reported that imposter scams were the number one fraud category for the ninth year running, with more than a million reports in 2025 and losses climbing nearly 20% to $3.5 billion. Government impersonator reports specifically were up 40%.
The fake-credential trick is spreading because it patches the weak point in the con. For years the giveaway on an impersonation call was a vague, unverifiable claim. Now the scammer preempts your doubt by “showing ID” before you even ask. It’s the same reason spoofed caller ID took off. Both tricks manufacture a signal of legitimacy that your brain has been trained to trust.
Which is the real lesson here. Every proof a stranger can send you through your phone can be faked. Caller ID, a photo of a badge, a spoofed email address, a case number, a letter with a seal on it. None of it survives the one test that matters: did you reach them, or did they reach you?
What to do the moment you get one
Slow down first. Urgency is the product they’re selling. “Your case closes today.” “The funds are about to be released.” “We can only hold this for an hour.” Any message pushing you to act right now is telling you to act wrong.
Don’t reply, not even “STOP.” Replying to a scam text confirms your number is live and tends to bring more. Don’t call any number in the message and don’t tap any link.
Verify on your own terms. If the person claims to be from an agency, look the agency up yourself. The real FTC takes reports at ReportFraud.ftc.gov and doesn’t run cases over text. If it’s supposedly your bank, call the number printed on the back of your card. The point is that you start the contact, through a channel you found, not one they handed you.
Then lock it down on your iPhone:
Open the message, tap the sender’s number or name at the top, and tap Block this Caller. That stops that specific number.
Report it. If it came as an SMS text, forward it to 7726, which spells SPAM, and your carrier uses those reports to fight back. If it came through iMessage, tap Report Junk under the message to send it to Apple and delete the thread.
Turn on Filter Unknown Senders so unknown numbers stop landing in your main inbox. Go to Settings, tap Apps, tap Messages, and switch on Filter Unknown Senders. Messages from anyone not in your contacts move to a separate list and you stop getting notifications from them. It’s not a full shield, but it takes the ambush out of these texts. We dug into where that setting helps and where it falls short in an earlier post.
If you already sent money or shared financial details, move fast. Call your bank or the payment app you used and ask them to reverse or cancel the transfer. The sooner you call, the better your odds. The FTC’s page on what to do if you were scammed has the specific steps by payment type.
The one line that keeps you safe
You can forget every detail in this post and keep just this: nobody legitimate proves their identity by sending you a picture of it. If a stranger has to show you a badge to get you to trust them, that badge is a prop. Hang up, look them up, and reach out yourself.
Not Today is a free spam-blocking app for iPhone. We built it to catch spam before it reaches you, using keyword rules, a community database of reported numbers, and optional AI detection. No account required. Download on the App Store.