Skip to content
Breachfolio
Hurricanes, fires, and earthquakes: how to donate without funding a scammer
GUIDES · DONATION SCAM

Hurricanes, fires, and earthquakes: how to donate without funding a scammer

Already donated to a fake campaign? Do this first

Contact your bank, card issuer, or the crowdfunding platform and ask about a review, hold, or dispute on the transaction.

Every major disaster brings a wave of copycat campaigns. Here's how to verify one before you give.

July 11, 20267 min readDaniel A. & Óscar S.

After a hurricane, wildfire, earthquake, or flood, donations and search traffic rise fast, and criminals react just as quickly, building websites and fundraising pages that copy real charities or invent personal tragedies from scratch. The FTC warns that scammers specifically exploit emergencies, and recommends donating to known organizations, researching them first, and avoiding weakly-protected payment methods. FEMA similarly directs donors toward established, trusted disaster-relief organizations rather than unfamiliar ones that spring up overnight. The core problem is that an emotional, urgent story is not the same thing as a transparent one.

Part of what makes this category of fraud effective is timing rather than sophistication. In the hours right after a disaster makes the news, there simply hasn't been time for search engines, social platforms, or watchdog groups to flag a brand-new fundraising page, so a fake campaign can circulate widely before anyone has had a chance to question it. Genuine relief organizations, by contrast, already have an established domain, a public history of past campaigns, and financial disclosures that predate the current disaster by years – none of which a scammer can fabricate convincingly on short notice, which is exactly why checking an organization's track record is such a reliable filter.

Common types of fraudulent campaigns

A lookalike charity uses a name close to a real one but a different domain, with funds going somewhere else entirely. A fabricated crowdfunding story relies on stolen or AI-generated images to sell a tragedy that never happened. Sometimes the scam is impersonation of an affected person: a compromised social media account messages the victim's real contacts asking for money. Other versions run a fake supply-collection drive, or point donors toward a cryptocurrency wallet address with no clear way to confirm who actually controls it.

How to verify before giving

Find the organization's website yourself by typing the name into a search engine directly – don't donate through an ad or a forwarded link. Check the domain, the organization's legal identity, and its track record. Confirm the same campaign and payment method actually appear on the charity's own official channels, not just on the page that reached you. Search the organization's name alongside terms like "fraud" or "scam" to see if others have flagged it. For a personal fundraiser, ask how the organizer actually knows the beneficiary before donating.

High-risk payment methods

Be cautious any time a campaign will only accept cash, gift cards, an urgent wire transfer, or cryptocurrency: these are the payment types with the least ability to trace or reverse. The FTC recommends using payment methods with stronger built-in protections, like a credit card, whenever you decide to donate. Never share a PIN, a one-time code, or a photo of your card for what should be an ordinary donation.

It also helps to separate the emotional pull of a disaster story from the practical question of where your money is actually going. A campaign can be entirely sincere in tone – heartfelt language, real-looking updates, an urgent countdown – while still failing every one of the verification steps above. Sincerity of tone is not evidence of anything; it's simply the easiest part of a fundraising page to fake, precisely because it costs nothing and requires no accountability. Treat the emotional framing and the organizational verification as two completely separate questions, and don't let a strong answer to one substitute for a weak answer to the other.

Warning signs

  • The organization appeared to spring up overnight
  • Its name is almost identical to a well-known charity
  • It pressures you to donate "before it's too late"
  • It can't clearly explain where the money actually goes
  • Funds are directed to a personal bank account without justification
  • The organizer asks you to keep the donation secret
  • Photos lack context, or turn up in unrelated news coverage
  • Payment details or methods change repeatedly

None of this means every fast-moving grassroots fundraiser is fraudulent – genuine local response efforts do start quickly, sometimes within hours of a disaster, run by neighbors or community members who happen to be closest to the damage. The distinction isn't speed, it's transparency: a legitimate grassroots effort can usually point to a specific, identifiable organizer, explain concretely what the money will buy, and doesn't object to you asking basic questions before donating. A campaign that reacts defensively, or simply stops responding, to reasonable questions about where funds are going is telling you something important on its own.

Variants you'll run into

The underlying con is always the same – an urgent tragedy plus a payment request – but the delivery channel changes with each disaster cycle. Recognizing the channel is often faster than analyzing the story itself. A text-message appeal arrives claiming to be a well-known relief organization, with a shortened link and a request to "give in under a minute." A social media ad boosts a fundraising page with dramatic footage, counting on the platform's ad review being slower than the news cycle. A QR code appears on a flyer taped to a lamppost, a store counter, or a community bulletin board, pointing to a payment app account rather than any organization.

Phone and doorstep variants exist too. A caller thanks you for a donation "you made last year" to a charity you don't remember, then asks you to renew it on the spot. A door-to-door collector wears a printed lanyard and carries a card reader, which proves nothing about where the money goes. And after high-profile disasters, a matching-donation variant circulates: an email claims an anonymous donor will "double your gift for the next 24 hours," manufacturing urgency where none exists. Every one of these collapses under the same test – leave the channel and verify the organization independently.

A walkthrough: how one donation goes wrong

Laura, 58, watches evening coverage of a wildfire two states away. Scrolling her feed afterward, she sees a fundraiser shared by an acquaintance: a photo of a burned house, a family's story, a progress bar already past half its goal. The page looks polished. Hundreds of people have donated. She gives without hesitating: the whole thing takes ninety seconds.

Two days later she wants to give again and searches for the campaign by name. She can't find it. The original post is gone, the organizer's profile was created three weeks ago, and a reverse search of the house photo turns up the same image attached to a news story from a different fire, years earlier. When she messages the acquaintance who shared it, the reply is sheepish: "I just reshared it, I don't actually know them." Laura files a dispute with her card issuer, and because she paid by credit card rather than a payment app, she has a real path to getting the money back. The lesson: the ninety seconds the scam saved her were the ninety seconds verification would have taken. Popularity, polish, and a progress bar told her nothing about who controlled the account.

If you already donated to a fake campaign

Contact your bank, card issuer, or the crowdfunding platform and ask about a review, hold, or dispute on the transaction. Preserve the campaign page, any ads you saw, receipts, and the beneficiary's information. Report the campaign to the social network it appeared on and to the charity it was impersonating, if applicable. Be especially wary of "recovery" services that ask for another upfront payment to get your donation back – that's a second scam layered on the first.

Prevention habits that outlast the news cycle

The best defense against disaster-donation fraud is set up before any disaster happens. Pick your two or three trusted relief organizations now, while nothing is burning, bookmark their official donation pages, and give through those bookmarks when the next emergency hits. That single habit removes the entire attack surface, no ad, forwarded link, or QR code ever gets a chance to redirect you, because you never needed one.

A few more habits are worth building deliberately. Use a credit card for every charitable gift, even small ones, so a dispute path always exists. Decide in advance that you will never donate through a payment app, wire transfer, gift card, or crypto wallet to anyone you can't independently verify – making the rule ahead of time means you don't have to re-litigate it under emotional pressure. If you want to support individual victims rather than large organizations, wait a few days: legitimate local funds coordinated by community foundations, unions, or municipal governments typically emerge within a week, with named administrators you can check.

Finally, have the conversation with the people around you most likely to be targeted. Older relatives who give generously and get their news from social media or forwarded messages sit squarely in the crosshairs of these campaigns. Show them one fake fundraiser and one real donation page side by side, agree on a family rule – "we only give through the bookmarks, and we tell each other before donating to anything new": and make clear there's no embarrassment in asking. A thirty-second question to a family member is the cheapest fraud protection that exists.

Quick checklist

  • Navigate to the charity's website yourself, never through a shared link
  • Verify the same campaign appears on the organization's official channels
  • Search the name alongside "fraud" or "scam" before giving
  • Use a credit card or another traceable, reversible payment method
  • Never send cash, gift cards, or crypto to an unverified organizer
  • Treat secrecy requests and shifting payment details as red flags
The one-sentence version. A compelling disaster story is never proof of legitimacy – verify the organization independently and pay with a traceable method before you give.

Frequently asked questions

Is a campaign trustworthy just because thousands of people shared it?
Not necessarily – popularity doesn't verify the identity of the organizer or how the funds will actually be used.
Do photos prove a disaster fundraiser's story is real?
No, images can be reused from unrelated events or AI-generated, so they don't confirm the story on their own.
What's the lowest-risk way to help after a disaster?
Choose an established, well-known organization and navigate to its official website yourself rather than clicking a shared link or ad.
Who writes this

Daniel A. and Óscar S. run Breachfolio, a small independent site about security and AI. This article was drafted with AI assistance and reviewed by a person before it went live. We write from documentation, vendor sources and published research rather than from original lab benchmarks, and we link a source in the sentence that relies on it. How we work · About us