Skip to content

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

FBI Operational Unit

FBI IC3 Recovery Asset Team (RAT)

Established in February 2018, the IC3 Recovery Asset Team (RAT) is a specialized operational unit within the Federal Bureau of Investigation. The RAT executes the Financial Fraud Kill Chain (FFKC) to intercept and freeze fraudulently transferred funds in near real-time, bridging crime reporting, federal law enforcement action, and financial institution compliance departments.

Read Operational Report & FFKC Guidelines

The Financial Fraud Kill Chain (FFKC) Workflow

The primary operational mechanism of the IC3 RAT is the Financial Fraud Kill Chain (FFKC), designed to freeze funds sitting in beneficiary bank accounts or in transit:

1. Victim Files
Emergency Complaint
→
2. IC3 RAT Triage
& Data Verification
→
3. Direct Contact
Bank AML Depts
→
4. Administrative
Hold Placed
↓
5. FBI Seizure Warrants & Legal Victim Repatriation

Required Wire Transfer Details

When filing a complaint with the IC3 RAT, ensure complete accuracy of:

  • Sending and receiving bank names
  • SWIFT / BIC Code and ABA Routing Number
  • Beneficiary account number & account name
  • Transaction reference number & exact timestamp

Targeted Threat Vectors

The RAT handles high-value cyber financial fraud including:

  • Business Email Compromise (BEC): Executive & payroll spoofing
  • Real Estate Wire Fraud: Title & escrow wire tampering
  • Investment & Crypto Fraud: Fraudulent trading platforms
  • Government Impersonation: Vendor & regulator scams

Incident Response Best Practices for Enterprises & Individuals

  1. Immediate Wire Recall Request

    Contact the sending bank's fraud department immediately and request a Recall for Fraud (SWIFT MT199/MT299 or Fedwire recall).

  2. Prompt IC3 RAT Complaint Submission

    Submit a complaint on ic3.gov without delay. Complete all required financial fields to enable RAT triage.

  3. Notify Local FBI Field Office Cyber Task Force

    For large-volume wire transfers, notify the Cyber Task Force at your local FBI Field Office for manual escalation alongside the online IC3 filing.

View Comprehensive IC3 RAT Technical Report

Recent IC3 Alerts & Advisories

Terms and Conditions for RAT Interventions

Prior to filing a complaint with the IC3 Recovery Asset Team, please read the following terms regarding emergency wire recalls.

Should you have questions prior to filing your complaint, view FAQ for information regarding:

  • What wire transfer details are required for FFKC activation?
  • How the RAT coordinates with sending & receiving bank AML departments.
  • How asset restitution and legal forfeiture proceedings are handled.

Complaints submitted to IC3 RAT are analyzed in near real-time and referred to FBI Field Offices, USAOs, and bank AML compliance teams.

The information submitted is encrypted via SSL encryption.

By clicking "I Accept" you acknowledge that providing false information could make you subject to fine, imprisonment, or both. (TITLE 18, U.S. CODE, SECTION 1001)