Phantom Hacker Scam: Milan Jackson / Bank of America Impersonation (Chicago, 2024-2025)

What Happened

Milan Jackson, a hairstylist on Chicago's North Side, received a phone call from someone claiming to work for Bank of America who warned her that a hacker was in the process of stealing $20,000 from her account. She checked the caller's number against the customer-service number printed on the back of her genuine Bank of America card, and the numbers matched (the caller had spoofed the bank's real number), which convinced her the call was legitimate. Following the caller's instructions, she logged into her online banking account and wired the full $20,000 to a different account that she was told would keep her money "protected" from the supposed hacker. Afterward she went to a physical Bank of America branch, where staff informed her she had been scammed. ABC7 Chicago published the story on January 16, 2025, with commentary from FBI Special Agent Rachel LaRocque explicitly linking the case to the FBI's "Phantom Hacker" scam alert category (FBI/IC3 PSA 230929, issued Sept. 29, 2023), which describes a multi-stage con typically combining fake tech-support, fake bank employee, and fake government-official impersonation to pressure victims into moving money to accounts the scammers control. Note: Jackson is described in reporting as a hairstylist raising two children and saving to open her own business; no source describes her as elderly or a senior citizen, so the "elder fraud" victim profile typical of the broader Phantom Hacker category does not apply to this specific individual.

How the Attack Worked

The scammer called claiming to be from Bank of America and warned Jackson that a "hacker" was attempting to steal $20,000 from her account. To build trust, the call's caller ID displayed (or the returned/callback number matched) the genuine customer-service number printed on the back of Jackson's real Bank of America card, a spoofing technique that defeats the common-sense advice to "verify the number." Believing the call was legitimate because the number checked out, Jackson followed the caller's instructions: she logged into her online banking account and wired $20,000 to a separate account that the caller said would "protect" her money from the hacker. In reality, that destination account was controlled by the scammer. This matches the FBI/IC3-documented "Phantom Hacker" scam pattern, which typically layers three escalating impersonation stages (fake tech-support, then fake financial-institution employee, then fake U.S. government official) to walk victims through moving money to what they believe is a secure government- or bank-protected account; the publicly reported facts on Jackson's specific case center on the bank-impersonation/spoofed-caller-ID phase and the resulting wire transfer.

The Lure & the Tell

Lure: an urgent, alarming call from someone claiming to be a bank representative, warning that a hacker was actively trying to steal a specific dollar amount ($20,000) from her account right now, creating fear and time pressure; credibility was reinforced because the caller ID/callback number matched the real customer-service number on the back of her actual Bank of America card. Tell (in hindsight): a real bank will never ask a customer to move their own money to another account, via wire or Zelle, to "protect" it from a hacker; instructing the customer to personally initiate a transfer to a "safe" account is itself the scam, not a security measure, and a matching caller ID/phone number is not proof of authenticity since it can be spoofed.

Outcome

Jackson wired the full $20,000 as instructed, then went to a Bank of America branch afterward and was told the call had been a scam. Bank of America told ABC7 that it might attempt to recover the funds but could not guarantee recovery once a client has personally authorized a wire transfer. Public reporting reviewed shows no confirmed recovery of the funds and no publicly disclosed arrest, indictment, or criminal charges tied specifically to this incident. The case became a public-awareness vehicle: it was covered by ABC7 Chicago (Jan. 16, 2025) with commentary from FBI Special Agent Rachel LaRocque, tying it to the FBI's broader "Phantom Hacker" scam alert.

Why It Matters

This case is a clean, widely-cited illustration of two dangerous misconceptions the FBI is actively trying to correct: (1) that a matching caller ID or callback number proves a call is genuine (it can be spoofed even against a number printed on a real bank card), and (2) that "moving your money to a safe account" is ever a legitimate bank security instruction (real banks never ask customers to self-initiate transfers to "protect" funds). It demonstrates how the well-documented, FBI-tracked "Phantom Hacker" scam family exploits institutional trust and urgency to bypass a victim's own verification instincts. Notably, it can succeed against victims outside the scam family's more commonly reported elderly-victim profile, and it underscores that once a victim personally authorizes a wire transfer, recovery is not guaranteed even when the bank is notified promptly, making prevention-focused education the primary defense.

Defenses

FBI/IC3 and Bank of America guidance from the coverage: legitimate financial institutions never call and ask a customer to move money to a "safe" account or via wire/Zelle; caller ID can be spoofed to match a real bank's printed number, so matching the number on the back of a card is NOT proof of legitimacy; never act on unsolicited "hacker on your account" calls; hang up and call the bank back using the number on your card or statement (not a callback number the caller provides or that appears via the same spoofed line); banks cannot guarantee recovery of self-authorized wire transfers, so prevention (not recovery) is the primary control; be skeptical of any instruction to move funds to "protect" them from a hacker, a hallmark of the Phantom Hacker scam family per FBI IC3 PSA 230929.