Skip to content
All stories

Your permit application is real. The city invoice may not be.

Fresh city warnings show how public planning records can make a fake fee request look legitimate. The safest check starts outside the message.

Jump to a section
Sources

PhoneYa Scam Check

The scam

You have a real permit, zoning request, or development application on file. A message arrives that looks like it came from the city and asks you to pay an invoice or fee.

The trick

The scammer may know your property address, case number, project details, and real staff names because those details can appear in public records.

The safe move

Do not pay through the message. Find the city or county's official website yourself and verify the fee with staff using contact information from that site.

Sources: Village of Twin Lakes, Wisconsin · City of Millbrae, California · FBI Internet Crime Complaint Center

Fresh warnings
2 cities on Sept. 17
Target
Permit and zoning applicants
National warning
FBI · March 9, 2026

Two local governments issued fresh warnings on September 17, 2026 about a scam that turns something ordinary and public into a convincing payment demand.

The Village of Twin Lakes, Wisconsin says people with pending planning and zoning matters are receiving fraudulent payment requests. The City of Millbrae, California issued a separate warning the same day about fraudulent emails and texts impersonating city employees or officials and requesting payment for city services or application fees.

This is not a brand-new scam. The FBI warned in March that victims had been identified nationwide. The fresh September alerts show the tactic is still active and reaching applicants through multiple channels, including text.

Sources: Village of Twin Lakes, Wisconsin · City of Millbrae, California · FBI Internet Crime Complaint Center

Why the fake invoice can look so real

Planning and permitting systems are designed to make many records available to the public. That can include property addresses, application numbers, hearing dates, project descriptions, and the names of government employees involved in the process.

The FBI says criminals use those details to make phishing messages more believable. They may send an itemized PDF invoice, copy official-looking language, refer to a real hearing or project, and time the message while an applicant is already communicating with local staff.

That combination matters. The message can be false even when nearly every project detail inside it is accurate.

“Scammers may use information that is publicly available through applications, agendas, meeting packets, or public notices to create letters or invoices that appear legitimate.”

Village of Twin Lakes · September 17, 2026

Sources: Village of Twin Lakes, Wisconsin · FBI Internet Crime Complaint Center

What the fresh warnings say

Twin Lakes gives one of the clearest rules for checking a suspicious request: do not use the contact information inside the message itself to verify it.

Millbrae similarly says suspicious payment requests should be confirmed directly with the city and notes that legitimate city email addresses end in @ci.millbrae.ca.us.

The FBI's March alert describes the same broader pattern nationwide. It says fraudulent invoices may demand payment by wire transfer, peer-to-peer payment, or cryptocurrency and may threaten project delays if payment is not sent quickly.

Sources: Village of Twin Lakes, Wisconsin · City of Millbrae, California · FBI Internet Crime Complaint Center

How to check a permit or zoning payment request

  1. Leave the message alone.

    Do not click its payment link, scan its QR code, call its number, or reply to ask whether it is legitimate.

  2. Open the government's official website yourself.

    Find the planning, zoning, building, or community development department through the city or county's real website.

  3. Verify the exact fee and payment method.

    Ask staff whether the invoice is real, whether the amount is correct, and how the agency normally accepts payment.

  4. Check the sender domain.

    A familiar employee name or city logo is not enough. Compare the full email domain with the one shown on the official website.

  5. Save the suspicious message.

    Keep the email, text, invoice, envelope, or other material in case the agency or law enforcement asks to review it.

Sources: Village of Twin Lakes, Wisconsin · City of Millbrae, California · FBI Internet Crime Complaint Center

If you already paid

Contact your bank, payment app, card issuer, or wire-transfer company immediately and report that you were tricked into paying a scammer. Ask whether the transaction can be reversed or refunded. Recovery is not guaranteed, but the FTC recommends acting quickly.

Also report the incident to the real city or county department so officials know applicants are being targeted. The FBI asks victims of this planning and zoning impersonation scheme to file a complaint with IC3 and include the email address, phone number if provided, project or hearing details, requested amount, and payment information when available.

If the scam reached you by text or included a phone number, you can look that number up on PhoneYa for available complaint data and screened community reports. That can add context, but it does not prove who sent the message or whether the number is safe.

Sources: Federal Trade Commission · FBI Internet Crime Complaint Center

Sources & further reading

  1. Village of Twin Lakes, WisconsinSCAM ALERT! · September 17, 2026
  2. City of Millbrae, CaliforniaScam Alert: City of Millbrae Employee Impersonation · September 17, 2026
  3. FBI Internet Crime Complaint CenterCriminals Impersonating City and County Officials in Phishing Emails for Planning and Zoning Permits · March 9, 2026
  4. Federal Trade CommissionWhat To Do if You Were Scammed · June 2026

By , based on the sources above.

Share this story

Suspicious call or text?

Look up a number and see what the PhoneYa community has reported.

Look up a number

Related reading

All stories