Field note · 8 min read
Fake charity and disaster-relief donation scams on Facebook, explained
Urgent appeals, cloned names, stolen photos, and a payment method that can't be reversed. Here's how the pattern works, and the five-minute check that breaks it.
A disaster happens. Within hours, the appeals arrive in your feed. Some are from organizations that have run relief operations for decades. Some are from a Page that did not exist on Monday. Both use the same photo style, the same urgent line, the same donate button. Facebook does not sort them for you.
The scam is not clever. It is fast. It borrows two things it did not earn: the credibility of a real organization's name, and the weight of real suffering in a real photo. Then it asks you to move money in a way that cannot be pulled back. That is the whole design. Everything else is decoration.
This is not a reason to stop giving. Most appeals you see are real, and disasters genuinely need money early. It is a reason to spend five minutes before you spend fifty dollars. In 2024, the FBI's Internet Crime Complaint Center logged more than 4,500 complaints reporting roughly $96 million in losses to fraudulent charities, crowdfunding accounts, and disaster-relief campaigns. Below is how the pattern runs, and exactly what to check.
The appeal arrives before the relief does
Real relief organizations move slower than the news cycle. They have to assess damage, stand up a designated fund, clear language with legal, and get staff on the ground. A fake one needs an afternoon: a new Page, a logo, one photograph, a payment link, and a card to run ads against people who just watched the coverage. So the first donation appeal in your feed after a hurricane, a wildfire, a flood, or a mass-casualty event is frequently the least verified thing you will see all week.
The copy has one job: close the gap between feeling something and paying something. The FBI and the FTC both flag the same tell. Scammers pressure you to give immediately, and they refuse to answer basic questions about the organization or explain how the money will be used. Urgency is not evidence. A legitimate relief fund will still be open tomorrow, and your donation will do the same work then. Treat "donate now, before it's too late" as a prompt to slow down, not speed up.
The name is close, but it is not the name
The most common trick is a name you almost recognize. Swap one word. Add "Fund," "Foundation," or "Relief" to a well-known organization. Append the name of the town that just burned. Lift the real charity's logo, or make one in the same colors. You are not reading the string character by character. You are matching a vibe, and the vibe is close enough. Sound-alike names work because they cost the scammer nothing and cost you your entire verification process.
Facebook hands you a check for this, and almost nobody uses it. Open the Page and look at its Page transparency section. It shows when the Page was created, whether it has changed names or been merged, which countries the people managing it are in, and which ads it is currently running. A relief charity for a two-week-old disaster whose Page was created last Tuesday, or which was called something unrelated a month ago, has told you what it is. Then reverse the direction: go to the real organization's website yourself and see whether it links to that Page. Verify from the charity outward, never from the ad inward.
The photos were taken from someone else
The images doing the emotional work in these appeals are usually not the advertiser's. The FBI's alert on disaster fraud describes criminals copying and reusing stolen images and stories in crowdfunding requests, and notes that AI is being used to make fraudulent appeals look more legitimate. In practice that means two things: a photograph of a real family who really did lose their home, attached to a fundraiser that has nothing to do with them; or a synthetic image of destruction that never happened anywhere.
Run the main image through a reverse image search. If it appears on news sites, on an unrelated fundraiser, or attached to a different name and a different disaster, you are done. Do not lean too hard on spotting AI artifacts, because those get fixed with every model release. Lean on a harder question instead: does anyone independent confirm this beneficiary exists? A named local news report, a named employer, a school, a church, a neighbor posting under their own established account. If the only proof the family exists is the fundraiser asking you to pay them, you have no proof.
How they ask you to pay is the loudest signal
The FTC's guidance is blunt, and it is the single most useful line in this whole subject. If a charity asks you to pay by cryptocurrency, by wire transfer, through a payment app, or with a gift card, it is likely a scam. No legitimate organization insists on a gift card. The reason is mechanical, not moral: those rails are built to be final. Crypto has no chargeback. Instant bank-transfer apps such as Zelle move money like cash, and the bank protections that cover unauthorized transactions generally do not cover a transfer you authorized yourself. By the time you have doubts, the money is gone and there is nothing to dispute.
Pay by credit card, or write a check made out to the organization. Never write a check to an individual, and never hand over gift card numbers or a crypto wallet address. Do not use the link in the ad or the DM. Type the charity's address into your browser yourself and give from its own site. If you are giving for a specific event, look for the option to designate your donation to that disaster rather than to a general fund. That one click also tells you something, because a real relief operation usually has that option and a two-day-old Page usually does not.
A personal fundraiser is not a charity
These are two different things and the feed presents them identically. A registered charity is a legal entity with a tax ID, public filings, and a state regulator that can act against it. A personal fundraiser is a person asking for money. Plenty of those are entirely real and entirely good, especially after a local disaster. But a personal fundraiser has no filings, no regulator, and no obligation to spend the money on what the page says. Meta requires nonprofits to enroll and pass verification before they can collect donations through Facebook's own fundraising tools. A post that pushes you to an outside link or a private message passes through no such gate.
Crowdfunding platforms do run donor-protection programs, but read the actual terms before treating one as insurance. They are capped, time-limited, and decided at the platform's discretion. Before giving to a personal fundraiser, ask three concrete questions. Who is the organizer, under a real account with real history? What is their stated relationship to the beneficiary? Has the beneficiary confirmed it publicly under their own account? If the organizer is anonymous or brand new, and comments are disabled or scrubbed, you are handing cash to a stranger who has arranged not to be asked questions.
How to check a charity in five minutes
Start with the IRS Tax Exempt Organization Search. Search by name or, better, by EIN, and it will tell you whether the organization is listed as eligible to receive tax-deductible contributions, whether its exempt status has been automatically revoked for non-filing, and what returns it has filed. One caveat worth knowing so you do not misread a blank result: churches and their affiliates, some subordinates covered by group exemptions, and government units may legitimately not appear. Next, check registration with your state's charity regulator, since most states require a charity to register before soliciting donations there; the directory of state charity officials is at nasconet.org. Then check the ratings and reports at BBB's Wise Giving Alliance (give.org), which evaluates charities against 20 standards covering governance, results reporting, finances, and truthful representations, plus Charity Navigator, CharityWatch, or Candid. Finally, search the exact name alongside "complaint" and "scam" and read what comes back.
Here's the check, in order, and it takes about five minutes. One: do not click the ad, and search the exact organization name yourself. Two: find the EIN and look it up in IRS Tax Exempt Organization Search; if no EIN is offered anywhere, stop there. Three: confirm it is registered with the state charity regulator. Four: open Page transparency and look at the creation date, past names, and manager countries. Five: pay by card or by check to the organization, never by gift card, crypto, wire, or transfer app, and never to a person. If any step fails, you do not owe anyone proof that it is a scam. You just do not donate there. The disaster will still need money next week, and the organizations that survive your five minutes will still be taking it. If you have already sent money, report it at ReportFraud.ftc.gov and to your state charity regulator.
Documented cases
Sources
- FBI IC3 — Beware of Charitable Fraud Related to Mass Casualty and Disaster Events (PSA, Jan 2025)
- FTC Consumer Advice — Give to a charity, not a scam
- IRS — Tax Exempt Organization Search
- NASCO — National Association of State Charity Officials (state charity regulator directory)
- BBB Wise Giving Alliance — Standards for Charity Accountability
Saw an ad you're not sure about?
Check it against the archive of documented Facebook-ad scams.
Browse the verdicts →