The message usually shows up at a bad moment. You're already dealing with a car accident claim, a divorce, a DUI charge, an estate, or a debt collector. Then an email or text arrives with a law firm's name, a case number and a request: pay a filing fee today, wire a settlement deposit, or send a photo of your driver's license so the paperwork can move.
That's the whole trick behind fake lawyer scams. Legal trouble is stressful, real lawyers do ask for money and documents, and most people have no idea what a normal request from a law firm looks like. Scammers fill that gap.
The short answer: A fake lawyer scam is a message that pretends to come from an attorney or law firm so you'll send money or personal information. Don't use any phone number, link or email in the message. Find the firm yourself, confirm the lawyer's license, and call the firm's published number.
I write about scams for people who don't work in IT, and this one gets less attention than it deserves. It hits people when they're least able to slow down, and it borrows the authority of a profession most of us are taught to obey. So let's slow it down.
How fake lawyer scams usually play out
Most versions fall into one of four shapes. Once you know which one you're looking at, the fix is usually obvious.
The borrowed name
A scammer copies a real firm's name, a real attorney's photo and bio, sometimes even a real license number, and puts them on a lookalike website or email address. The firm is real. The person emailing you isn't. The UK's Solicitors Regulation Authority scam alerts page shows how common this is: in the last ten days of September 2026 alone, it posted more than a dozen warnings about emails, letters, websites and WhatsApp profiles misusing genuine firms' names.
The firm that doesn't exist
Some scammers invent a firm from scratch: a clean website, stock photos on the team page, an office address that turns out to be a mailbox store. A lot of these pitch "recovery" help to people who already lost money in an earlier scam, promising to get it back for an upfront fee. Several of those recent SRA alerts are exactly this, fake firms offering to recover lost investment funds.
The hijacked inbox
Sometimes the email really does come from your lawyer's account, because a criminal broke into it. Security people call this business email compromise. The attacker reads the real case, waits for a settlement or a real estate closing, then sends "updated" wire instructions. Everything looks right because it's coming from the right place.
The threat
The last shape skips the flattery and goes straight to fear. An "attorney" says you're being sued, or that a warrant is coming, unless you settle a debt today. Real lawyers don't resolve lawsuits with a phone call that ends in gift card numbers.
What makes all four land is that scammers often know real details about you. Plenty of that comes from court records and people-search sites. This month Krebs on Security reported that the data broker Radaris lost its domains in a privacy fight, a good reminder of how much personal information is simply for sale.
Red flags that show up again and again
Any one of these on its own could be innocent. Two or more in the same message is your cue to stop and verify. If they look familiar, that's because they're the same pressure tricks we cover in our phishing guides, wearing a suit.
| What the message does | What it should tell you |
|---|---|
| Sets a deadline measured in hours | Legal deadlines are real, but a firm will give you time to call it back. |
| Wants payment by gift card, crypto or a payment app | Scammers like these because the money is hard to reverse. |
| Sends new or "updated" wire instructions | Treat any change to payment details as unverified until you confirm it by phone. |
| Comes from a free email account or an odd domain | A firm with a website usually emails from that same domain. Check the spelling letter by letter. |
| Asks for your Social Security number, bank login or ID early | Identity documents should only travel through a channel you've confirmed. |
| Arrives out of nowhere | If you never contacted the firm, ask how they found you and why. |
How to verify a law firm before you pay or share anything
Here's the routine I'd follow. It takes about ten minutes, which is nothing next to the cost of getting it wrong.
- Stop replying. Don't answer the email, call the number in it, or tap its links. Anything inside the message could be controlled by whoever wrote it.
- Find the firm on your own. Use a search engine, your earlier paperwork, a court filing, or a referral from someone you trust. You're looking for the firm's established website, not the one in the message.
- Compare the details. Line up the message against what the firm publishes itself: the business name, office address, published phone number, domain name, practice area and contact information. One mismatch is enough to stop.
- Check the license. In the U.S., each state licenses its own lawyers, and most state bars or courts offer a public lookup. In England and Wales, the SRA keeps the Solicitors Register. Canada and Australia have provincial and state law societies that do the same job.
- Call the published number. Ask whether the firm sent the message and whether the request is real. A legitimate office won't mind. It would much rather take a two-minute call than clean up after a scam that used its name.
- Confirm payment instructions by voice. Before you wire anything, and especially if the instructions changed, confirm the account details with a person at the firm on a number you found yourself.
What that check looks like in real life
Suppose someone gets a text claiming to be from a local DUI attorney and asking for immediate payment. They shouldn't confirm it by calling the number in that same text. They should find the firm's established website on their own and run the comparison above.
For example, Johnny Gardner Law publicly identifies itself as a Conway DUI-defense firm serving Horry County. Someone independently searching for a Grand Strand DUI lawyer should verify that any message claiming to represent the firm matches its independently published contact details before sharing sensitive information or sending money.
The wider lesson fits in one line, and it's the one I'd tape to the fridge:
Verify through a second channel that the suspicious message didn't provide.
That rule works for lawyers, banks, tech support, your boss, and the grandkid who suddenly needs bail money.
If you already sent money or information
Move fast, and don't let embarrassment slow you down. These scams are built to fool careful people, and the first few hours matter most.
- Call your bank or payment provider now. Ask about recalling the wire or disputing the charge. Speed matters more here than anywhere else.
- If you shared ID or a Social Security number, place free credit freezes with Equifax, Experian and TransUnion, and use IdentityTheft.gov for a step-by-step recovery plan.
- If you typed a password anywhere, change it, then turn on multi-factor authentication for that account and your email.
- Report it. In the U.S., file with the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov. Keep copies of every message.
- Tell the real firm. If a genuine firm's name was used, let it know. It may already be warning clients, and your report helps.
For the longer cleanup, our account protection guides walk through taking back email and banking access step by step.
A quick word for small law firms
If you run or work at a small firm, you're part of this story too, because your name is what scammers borrow. A few habits make the fakes easier for your clients to spot:
- Turn on MFA for every email account at the firm, shared inboxes included.
- Tell clients in writing that you'll never change wire instructions by email.
- Confirm any change to payment details by phone, in both directions.
- Search now and then for lookalike domains that use your firm's name.