Case Library / Phishing / Citizens Disability SSDI Impersonation/Robocall Scheme

Citizens Disability SSDI Impersonation/Robocall Scheme

DOJ/FTC alleged that Citizens Disability and subsidiary CD Media made 109 million-plus illegal telemarketing calls, including 25.7 million-plus to Do-Not-Call Registry numbers, using robocalls voiced by "Amber" or "Audrey" that falsely told consumers they were following up on the consumer's own SSDI eligibility inquiry.

Share:

Social Engineering Examples·5 sources

What happened

Citizens Disability, LLC, a Massachusetts-based company that helps consumers apply for Social Security Disability Insurance (SSDI) benefits, and its subsidiary CD Media, LLC contracted with third-party lead generators and call centers to sell their paid benefits-application-assistance services. Per the DOJ complaint (filed upon FTC referral) in the District of Massachusetts (Case No. 1:25-cv-12826), between January 2019 and July 2022 the defendants allegedly caused more than 109 million outbound telemarketing calls to be placed, including more than 25.7 million calls to telephone numbers listed on the National Do Not Call (DNC) Registry. The leads for these calls were allegedly harvested through deceptive "consent farm" websites that offered consumers sweepstakes entries, coupons, or other services in exchange for contact information, without adequately disclosing that the information would be used for telemarketing solicitation. Many recipients were lower-income or disabled consumers. A subset of the calls allegedly used prerecorded robocalls in which a voice identifying itself as "Amber" or "Audrey" falsely told the consumer "it show[s] here that you recently inquired about your eligibility for Social Security Disability benefits," creating the false impression the call was a personalized follow-up to the consumer's own prior outreach, when in fact the consumer's data had simply been scraped from an unrelated coupon/sweepstakes site. Defendants neither admitted nor denied these allegations in resolving the matter via stipulated order.

How it worked

The complaint alleges that lead-generation websites used sweepstakes, coupons and service offers to collect contact information without adequately disclosing its telemarketing use. The companies then allegedly used robocalls and calls to DNC-listed numbers to sell SSDI application-assistance services. The deceptive hook was a claim that the consumer had recently inquired about eligibility, presenting an unsolicited sales pitch as follow-up to prior contact. The allegation does not establish a measured increase in pickup or engagement caused by that script.

The lure and the tell

The tell was the specific script line quoted in the FTC complaint: a prerecorded voice identifying itself only as "Amber" or "Audrey" stating "it show[s] here that you recently inquired about your eligibility for Social Security Disability benefits," a claim the recipient had never actually made. Consumers who had never visited any SSDI-related site (and in many cases were on the DNC Registry) had no way to have "inquired," which is the giveaway that the call originated from purchased consent-farm data rather than a genuine prior contact; legitimate SSA-related outreach would not come from a third-party disability-services telemarketer referencing an inquiry the consumer never made.

Outcome

The United States filed the complaint and proposed stipulated order in the District of Massachusetts on September 30, 2025, in case 1:25-cv-12826. PacerMonitor lists the consent judgment under October 14 with an October 15 entry timestamp, rather than September 30. The proposed terms specify a $2 million civil penalty, two $500,000 payments measured from entry, and conditional suspension of the remaining $1 million. The FTC described restrictions on prerecorded robocalls, DNC-listed calls and misrepresentations, plus lead-generator due diligence and monitoring. Defendants neither admitted nor denied the complaint allegations. The docket chronology establishes later approval; the payment schedule does not establish actual collection.

Why it matters

This case documents an alleged prior-inquiry pretext in a large telemarketing operation. The FTC tied the leads to unrelated sweepstakes, coupons and service offers, while the calls claimed the recipients had asked about SSDI eligibility. The civil penalty and injunction terms address that conduct; they should not be presented as a measured consumer-loss total.

Defenses

FTC/DOJ enforcement resulted in a permanent injunction barring: (1) prerecorded/robocall telemarketing except under a narrow statutory safe harbor; (2) calls to numbers on the National Do Not Call Registry absent a valid exception; (3) misrepresentations that a call is in response to a consumer's own SSDI-eligibility inquiry or implies SSA affiliation; and required due diligence/monitoring of third-party lead generators, recordkeeping, and restrictions on use/retention of consumer data harvested via consent-farm sites. For consumers, the case illustrates standard robocall defenses: numbers on the DNC Registry are not fully protected against sweepstakes/coupon-site data harvesting; a caller claiming "you recently inquired" should be independently verified by contacting SSA (ssa.gov or 1-800-772-1213) directly rather than trusting the inbound caller; legitimate SSA communications do not originate from third-party disability-benefits marketing firms.

Sources
Cite this case

Social Engineering Examples. “Citizens Disability SSDI Impersonation/Robocall Scheme”. Accessed 3 November 2026. https://socialengineeringexamples.com/citizens-disability-ssdi-robocall-scheme-2025

Attack Chain & Defense
1Lead sourcing via consent farms
What happened

per the complaint, third-party lead generators operated websites offering sweepstakes entries, coupons, or other unrelated services to induce consumers to hand over their name and phone number, with the fact that this data would be used for telemarketing buried or omitted from disclosures. This is the data-harvesting front end that supplies raw targets, functioning like a low-cost OSINT layer built from consumers' own voluntarily submitted information rather than public-record research.

The control that would have stopped it

clearly disclose how lead-generation information will be used and verify that leads were obtained lawfully. This is a general safeguard; the FTC separately described due-diligence and monitoring obligations in the proposed order.

2Pretext scripting
What happened

the FTC alleged that prerecorded calls used a false claim that the consumer had recently inquired about SSDI eligibility.

The control that would have stopped it

Requiring due diligence and ongoing monitoring of third-party lead generators and call centers, including script review and immediate suspension of vendors found using deceptive material, of the kind the stipulated order imposes on the defendants going forward, disrupts the supply chain that manufactures deceptive scripts before they ever reach a consumer.

3Mass dialing
What happened

the complaint alleges more than 109 million outbound calls from January 2019 through July 2022, including more than 25.7 million calls to DNC-listed numbers.

The control that would have stopped it

check DNC restrictions and valid consent before dialing. Caller authentication alone does not establish lawful consent or eliminate deceptive scripts.

4Pretext delivery
What happened

the alleged script presented an unsolicited sales call as follow-up to the recipient's own inquiry. That claim of prior contact supplied the familiarity pretext.

The control that would have stopped it

Consumer education is the realistic control here, verify any inbound claim of a prior inquiry independently by contacting the Social Security Administration directly (ssa.gov or 1-800-772-1213) rather than trusting the caller, since legitimate SSA-related outreach would not originate from a third-party disability-benefits marketing firm referencing an inquiry the consumer never made.

5Sales solicitation
What happened

the FTC alleged that the companies used third-party lead generators and call centers to sell SSDI application-assistance services.

The control that would have stopped it

review lead sources and sales scripts for false prior-inquiry claims. The FTC's proposed order requires due diligence and monitoring of lead generators.

6Commercial objective
What happened

the alleged calls marketed paid assistance with benefit applications. The FTC described many recipients as lower-income or disabled; the cited penalty is not a measure of their losses.

The control that would have stopped it

the announced civil penalty and restrictions address alleged unlawful telemarketing. They are not proof of a consumer-redress payment or quantified prevention of future losses.

Quick Facts
Victim
General public / consumers nationwide, particularly lower-income
and disabled individuals, whose numbers were on or off the National Do Not Call Registry
Location
United States
(Massachusetts-based defendants; consumers called nationwide); litigated in U.S. District Court for the District of Massachusetts
Date
Conduct alleged: January 2019 - July 2022.
Complaint and proposed order filed September 30, 2025. Consent judgment appears under October 14, 2025 in the docket, with an October 15 entry timestamp in PacerMonitor.
Impact
The stipulated terms specify a $2,000,000 civil penalty against Citizens Disability, LLC and CD Media, LLC, jointly and severally.
Basisnot-a-lossCivil penalty obligation; not an amount taken from victims or evidence of collection.
Two $500,000 payments are required: within seven days of entry and within one year of entry. The remaining $1,000,000 is suspended upon those payments, subject to the order's financial-representation conditions; a material financial misstatement can lift that suspension. The FTC said the companies "will pay a $1 million penalty." These are penalty obligations, not measured consumer losses or confirmed payments received.
Status
Documented incident
Case Type
Real-World Incident
Sector
Consumer / General Public, Professional & Business Services
Threat Actor
Organized Crime
Explore more

Related Cases

Browse by what this case has in common with others in the library.