How to Spot a Class Action Settlement Scam in 2026
Six concrete red flags that catch nearly every fake notice, plus where to start the real claim path.
Settlement scams spike whenever a large case hits the news cycle. The 2024 AT&T data leak, the BIPA cases, and the BoA / 7-Eleven case have all attracted lookalike sites and impersonator emails. Here are the patterns that catch them.
Red flag 1: Any request for payment
Real class action administrators never charge a fee to file a claim. The settlement fund pays for everything, including the administrator. If a notice asks for a credit card, a processing fee, or a percentage of the future payout, it is a scam.
Red flag 2: Full SSN requested without an account reference
Real administrators ask for the minimum data needed to match you to their existing class records. That is usually an email, phone number, or account number, plus a name and an address. They might ask for the last 4 of your SSN to confirm identity. Full SSN before any account reference is a scam pattern.
Red flag 3: Domain that does not match the administrator
The administrator's URL is a single domain controlled by a known company (Angeion, Kroll, Rust, JND, A.B. Data, Epiq). Scammers register lookalike domains: "tmobile-data-settlement.net" instead of "t-mobilesettlement.com". Always verify the domain on a search engine before submitting anything.
Red flag 4: Urgency before final approval
Real notices give the deadline in clear, calm language and never use phrases like "file today or lose your payment". Scammers use urgency to bypass scrutiny. If the case has not even reached final approval yet, no payout is due, so any urgency notice is fake.
Red flag 5: Wire transfer or gift card payment promised
Real settlements pay by paper check, ACH direct deposit, prepaid debit card, or PayPal. They never use wire transfer, cryptocurrency, or gift cards. Any of those means scam.
Red flag 6: Sender address mismatch with the administrator's corporate domain
Look at the actual sender email. Real notices come from an address at the administrator's corporate domain: @kroll.com, @angeiongroup.com, @epiqglobal.com, @rustconsulting.com, @jndla.com, @abdata.com. Anything else, even if the email body looks polished, is suspect.
Where to start the real claim
Three trusted entry points: classaction.org, topclassactions.com, and ftc.gov/enforcement/refunds. All three list active settlements with links to the official administrator. Type the URL by hand rather than clicking a link in an email.
For specific named cases, search for the court docket on PACER (pacer.uscourts.gov). The docket lists the court-approved administrator. Compare that name against the administrator on the website you reached.
If you already submitted information to what turned out to be a scam, freeze your credit immediately with the three credit bureaus, change passwords for any accounts that share the email or phone you used, and file a report with the FTC at reportfraud.ftc.gov.