Some scams rely on clever technology. Others rely on human vulnerability. Impersonation scams – also known as impostor scams – fall firmly into the latter category.

They don’t involve malware or hacking, but they can still be highly sophisticated. And they’re alarmingly effective.

In this article, we’ll explain how impersonation scams work, what to watch for, and how to protect your team and your club from costly mistakes.

Key Takeaways

• Impersonation scams use emotional manipulation to pressure victims into giving up money or information.
• Scammers often pose as authority figures, family members, or colleagues.
• Red flags include urgent requests, unusual payment methods, and off-channel communication.
• These scams cost victims billions annually, and clubs are not immune.
• Verification, staff training, and updated protocols are your best line of defense

What Is an Impersonation Scam?

In an impersonation scam, the criminal pretends to be someone the victim trusts. This might be a friend, family member, colleague, manager, or even a service provider.

These scams are effective because they exploit human emotion – particularly urgency, fear, or concern. And they work quickly. The goal is to make the target act before thinking, often convincing them to hand over sensitive information or send money before they realize anything’s wrong.

What It Might Look Like in a Club Setting

In membership clubs, these scams may target employees, managers, or even members. Here’s how a typical impersonation scam might play out:

• A scammer calls pretending to be a police officer, claiming there’s been a security incident at the club and they need access to video surveillance.
• A “utility worker” arrives claiming there’s a safety hazard and demanding immediate payment to prevent service disruption.
• Someone emails the front desk posing as a club manager, asking for login details or a money transfer to “resolve an urgent matter.”
• A staff member receives a panicked message from a number claiming to be their spouse or child, asking for help, often financial.

The list goes on, and unfortunately, these scams evolve constantly.

Why Impostor Scams Are So Dangerous

Impersonation scams are difficult to detect because the scammer pretends to be someone familiar and authoritative. The message is often personal. And in the moment, people want to help or avoid trouble.

The consequences, however, can be serious. Clubs have reported:

• Unauthorized access to systems and data.
• Financial loss from fraudulent payments.
• Reputational damage after a breach.
• Decreased staff morale and confidence.

How Common Are Impersonation Scams?

Impersonation scams aren’t rare — they’re alarmingly widespread.

According to UK Finance, criminals stole more than £570 million through payment fraud in just the first half of 2024. Impersonation tactics played a major role in those losses. 

Meanwhile, the U.S. Federal Trade Commission reported that Americans lost over $1.1 billion to impersonation and similar scams in 2023 alone.

These numbers reflect what we’re seeing on the ground: scammers are getting smarter, more strategic, and more convincing.

Red Flags of Impersonation Scams to Watch For

Here are some signs that you or your team might be dealing with an impersonation scam:

• Urgent requests: The message pressures you to act quickly, often bypassing normal procedures.
• Unusual payment methods: The request involves gift cards, cryptocurrency, wire transfers, or other hard-to-trace methods.
• Communication outside of normal channels: Messages might come from a personal email, text, or unknown number instead of a verified account.
• Vague or inconsistent details: The person may avoid specifics, or their story might not quite add up.

Real-Life Examples of Impostor Scams

While we often think these scams happen to “other people,” clubs and organizations of all sizes have fallen victim. Here are a few real-world scenarios:

The Executive Email Scam

A club administrator received an email from what appeared to be the general manager, requesting an urgent wire transfer to a vendor. The email looked legitimate – same signature, similar tone. But it was a fake account. By the time the scam was uncovered, the funds were gone.

The Grandchild Trick

A staff member got a call from someone claiming to be their grandson, saying he’d been in a car accident and needed money for bail. The caller even cried on the phone. It turned out to be a fraud – a common trick designed to create panic.

The Fake IT Technician

A person arrived at a club saying they were from the internet provider and needed immediate access to server rooms due to “suspicious activity.” There was no scheduled visit, but because the person had a badge and uniform, staff nearly allowed entry. A quick call to the real provider prevented disaster.

These examples highlight how convincing scammers can be and how important it is to verify before reacting.

What to Do If Your Club Is Targeted

If your club suspects an impersonation attempt, here’s how to respond:

1. Stop and Assess

Never act on a request that feels rushed or suspicious. Take a moment to verify the message through official channels. If a staff member gets a message from a manager, call them directly to confirm. If someone shows up in person, ask for ID and call the company they represent.

2. Alert the Right People

Notify your club’s IT support provider, general manager, or designated security contact immediately. Acting fast may stop the scam in its tracks or help recover losses.

3. Document Everything

Save emails, phone numbers, voicemails, or texts. If someone visits the club, write down what they said and how they presented themselves. This information may help authorities track the scammer and help prevent future attempts.

4. Educate Your Team

One of the most effective defenses is awareness. Talk to your staff about impersonation scams and how to spot them. Make it part of onboarding and regular training. Encourage a workplace culture where verifying requests – especially urgent or unusual ones – is standard practice.

5. Review and Improve Procedures

Consider updating your internal procedures to prevent unauthorized payments or data sharing. For example:

• Require verbal confirmation for all wire transfers.
• Limit the number of employees with access to sensitive systems.
• Post a contact list of trusted vendors, staff, and partners near the front desk.

Conclusion

Impersonation scams may seem simple – but they are sophisticated, damaging, and increasingly common. By staying alert, encouraging verification, and training your staff, your club can avoid falling victim to these high-pressure attacks.

And if you ever feel unsure, trust your gut. It’s better to double-check than to become another statistic.

Read also our article about the Pig Butchering Scam that has spread globally, targeting people through social media, dating apps, and even random text messages.