DOJ/FTC alleged that Citizens Disability and subsidiary CD Media made 109 million-plus illegal telemarketing calls, including 25.7 million-plus to Do-Not-Call Registry numbers, using robocalls voiced by "Amber" or "Audrey" that falsely told consumers they were following up on the consumer's own SSDI eligibility inquiry.
Social Engineering Examples·5 sources
Citizens Disability, LLC, a Massachusetts-based company that helps consumers apply for Social Security Disability Insurance (SSDI) benefits, and its subsidiary CD Media, LLC contracted with third-party lead generators and call centers to sell their paid benefits-application-assistance services. Per the DOJ complaint (filed upon FTC referral) in the District of Massachusetts (Case No. 1:25-cv-12826), between January 2019 and July 2022 the defendants allegedly caused more than 109 million outbound telemarketing calls to be placed, including more than 25.7 million calls to telephone numbers listed on the National Do Not Call (DNC) Registry. The leads for these calls were allegedly harvested through deceptive "consent farm" websites that offered consumers sweepstakes entries, coupons, or other services in exchange for contact information, without adequately disclosing that the information would be used for telemarketing solicitation. Many recipients were lower-income or disabled consumers. A subset of the calls allegedly used prerecorded robocalls in which a voice identifying itself as "Amber" or "Audrey" falsely told the consumer "it show[s] here that you recently inquired about your eligibility for Social Security Disability benefits," creating the false impression the call was a personalized follow-up to the consumer's own prior outreach, when in fact the consumer's data had simply been scraped from an unrelated coupon/sweepstakes site. Defendants neither admitted nor denied these allegations in resolving the matter via stipulated order.
The complaint alleges that lead-generation websites used sweepstakes, coupons and service offers to collect contact information without adequately disclosing its telemarketing use. The companies then allegedly used robocalls and calls to DNC-listed numbers to sell SSDI application-assistance services. The deceptive hook was a claim that the consumer had recently inquired about eligibility, presenting an unsolicited sales pitch as follow-up to prior contact. The allegation does not establish a measured increase in pickup or engagement caused by that script.
The tell was the specific script line quoted in the FTC complaint: a prerecorded voice identifying itself only as "Amber" or "Audrey" stating "it show[s] here that you recently inquired about your eligibility for Social Security Disability benefits," a claim the recipient had never actually made. Consumers who had never visited any SSDI-related site (and in many cases were on the DNC Registry) had no way to have "inquired," which is the giveaway that the call originated from purchased consent-farm data rather than a genuine prior contact; legitimate SSA-related outreach would not come from a third-party disability-services telemarketer referencing an inquiry the consumer never made.
The United States filed the complaint and proposed stipulated order in the District of Massachusetts on September 30, 2025, in case 1:25-cv-12826. PacerMonitor lists the consent judgment under October 14 with an October 15 entry timestamp, rather than September 30. The proposed terms specify a $2 million civil penalty, two $500,000 payments measured from entry, and conditional suspension of the remaining $1 million. The FTC described restrictions on prerecorded robocalls, DNC-listed calls and misrepresentations, plus lead-generator due diligence and monitoring. Defendants neither admitted nor denied the complaint allegations. The docket chronology establishes later approval; the payment schedule does not establish actual collection.
This case documents an alleged prior-inquiry pretext in a large telemarketing operation. The FTC tied the leads to unrelated sweepstakes, coupons and service offers, while the calls claimed the recipients had asked about SSDI eligibility. The civil penalty and injunction terms address that conduct; they should not be presented as a measured consumer-loss total.
FTC/DOJ enforcement resulted in a permanent injunction barring: (1) prerecorded/robocall telemarketing except under a narrow statutory safe harbor; (2) calls to numbers on the National Do Not Call Registry absent a valid exception; (3) misrepresentations that a call is in response to a consumer's own SSDI-eligibility inquiry or implies SSA affiliation; and required due diligence/monitoring of third-party lead generators, recordkeeping, and restrictions on use/retention of consumer data harvested via consent-farm sites. For consumers, the case illustrates standard robocall defenses: numbers on the DNC Registry are not fully protected against sweepstakes/coupon-site data harvesting; a caller claiming "you recently inquired" should be independently verified by contacting SSA (ssa.gov or 1-800-772-1213) directly rather than trusting the inbound caller; legitimate SSA communications do not originate from third-party disability-benefits marketing firms.
Social Engineering Examples. “Citizens Disability SSDI Impersonation/Robocall Scheme”. Accessed 3 November 2026. https://socialengineeringexamples.com/citizens-disability-ssdi-robocall-scheme-2025
per the complaint, third-party lead generators operated websites offering sweepstakes entries, coupons, or other unrelated services to induce consumers to hand over their name and phone number, with the fact that this data would be used for telemarketing buried or omitted from disclosures. This is the data-harvesting front end that supplies raw targets, functioning like a low-cost OSINT layer built from consumers' own voluntarily submitted information rather than public-record research.
clearly disclose how lead-generation information will be used and verify that leads were obtained lawfully. This is a general safeguard; the FTC separately described due-diligence and monitoring obligations in the proposed order.
the FTC alleged that prerecorded calls used a false claim that the consumer had recently inquired about SSDI eligibility.
Requiring due diligence and ongoing monitoring of third-party lead generators and call centers, including script review and immediate suspension of vendors found using deceptive material, of the kind the stipulated order imposes on the defendants going forward, disrupts the supply chain that manufactures deceptive scripts before they ever reach a consumer.
the complaint alleges more than 109 million outbound calls from January 2019 through July 2022, including more than 25.7 million calls to DNC-listed numbers.
check DNC restrictions and valid consent before dialing. Caller authentication alone does not establish lawful consent or eliminate deceptive scripts.
the alleged script presented an unsolicited sales call as follow-up to the recipient's own inquiry. That claim of prior contact supplied the familiarity pretext.
Consumer education is the realistic control here, verify any inbound claim of a prior inquiry independently by contacting the Social Security Administration directly (ssa.gov or 1-800-772-1213) rather than trusting the caller, since legitimate SSA-related outreach would not originate from a third-party disability-benefits marketing firm referencing an inquiry the consumer never made.
the FTC alleged that the companies used third-party lead generators and call centers to sell SSDI application-assistance services.
review lead sources and sales scripts for false prior-inquiry claims. The FTC's proposed order requires due diligence and monitoring of lead generators.
the alleged calls marketed paid assistance with benefit applications. The FTC described many recipients as lower-income or disabled; the cited penalty is not a measure of their losses.
the announced civil penalty and restrictions address alleged unlawful telemarketing. They are not proof of a consumer-redress payment or quantified prevention of future losses.
Browse by what this case has in common with others in the library.
A European subsidiary of Toyota parts maker Toyota Boshoku transferred up to about 4 billion yen (~$37M) to criminals in…
A phishing email tricked Unatrac's CFO into surrendering his Office365 credentials on a fake Microsoft login page; the attacker then…
Fraudsters posing as Tecnimont's group CEO, other executives, and a fictitious Swiss lawyer used spoofed emails and a staged series…
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
Fraudsters faked WPP CEO Mark Read on WhatsApp and staged a Teams call with a cloned executive voice. The agency…
A fraudster spoofed Wells Fargo's real 800 number nine minutes after a legitimate advisor call, phished a 2FA code from…
The FBI's December 2024 warning on AI-enabled fraud: AI text, fake IDs, cloned voices and deepfake video, and what the…
A Bengaluru retiree lost Rs 6.88 lakh after a deepfake Facebook ad of India's finance minister pitched a fake SBI-linked…
Attackers made Microsoft's own Azure Monitor send a fake $459.90 Windows Defender bill that passed SPF, DKIM and DMARC. A…
A caller posing as Standard Bank got an 18-year-old to move her R438,900 education fund to a 'safe' account in…
A Chicago hairstylist lost $20,000 to a Phantom Hacker scam. A caller claiming to be Bank of America said a…
OpenAI says a Russian-speaking actor used throwaway ChatGPT accounts to build Windows malware, spread as a fake Crosshair-X gaming tool.…
A scammer posing as GCI's CFO emailed payroll and, after the employee's initial pushback, persuaded them to hand over 2015…
A phishing email tricked Unatrac's CFO into surrendering his Office365 credentials on a fake Microsoft login page; the attacker then…
In June 2025 the DOJ filed to forfeit $225.3M in USDT tied to pig butchering scams, after Tether and OKX…
A phone-record pretexting incident involving a retired U.S. Army general was followed by FTC enforcement and broader privacy-policy scrutiny.
A compromised Constant Contact mass-mailing account let Russia-linked Nobelium (APT29) send USAID-spoofed phishing emails that funneled roughly 3,000-7,000 accounts across…
The EA data breach began in June 2021, when hackers used a Slack session cookie they said cost $10 to…
Fraudsters posing as RBS fraud-team staff talked Hamilton Academical FC's sole authorised banking employee into moving nearly £1 million into…
Fake finance "directors" in WhatsApp groups steered 18+ US investors to NanoBit, a crypto platform that never traded. The SEC…
Gootloader went quiet in the spring of 2025, the tracking researcher telling BleepingComputer his abuse reports caused the operation to…
Belgian bank Crelan lost close to EUR 70 million (~US$75.8M) after fraudsters impersonating its CEO induced internal staff to execute…
An Austin man lost $1,408,850 to a fake DAIQ crypto platform found on LINE. A staged $40,000 handoff led police…
MGM Resorts, September 2023. A caller reportedly talked the IT help desk into resetting an employee's access, and the shutdown…