CONSUMER ALERT - DISASTER FRAUD

Texas flood donation scams: the four fraud fronts that open after every disaster

The Texas Hill Country flooded again in mid-July 2026, one year after the catastrophic July 2025 flash floods. Each disaster brought an immediate wave of generosity, and an immediate wave of fraud. After the 2025 floods, copycat payment accounts impersonated a flooded volunteer fire department and Texas Attorney General Ken Paxton opened an investigation into charity impersonation schemes; within a day of the 2026 flooding his office issued a fresh alert on fake charities and price gouging. The playbook repeats after every hurricane, flood, and wildfire. Here is how it works, and the checks that beat it.

SB

SafeBrowz Threat Research Security ResearchJuly 20, 20269 min read

Four fraud fronts open the moment the water recedes

Disaster fraud is not one scam but a season of them, each targeting a different moment of the recovery. After the Hill Country flooding, all four showed up on schedule:

1. The charity that never existed. Invented relief funds with emotional names, stolen photos, and a donation button wired to a personal account, spread through social ads, texts, and forwarded posts.
2. The payment handle that is almost right. Real charities publish a Venmo, Cash App, or Zelle handle, and scammers register near-identical copies within hours to intercept the money.
3. The FEMA worker who wants a fee. Imposters call, text, or knock, offering to "process" disaster grants or inspections for a charge. The real agency never charges.
4. The contractor who needs cash today. Door-to-door "storm chasers" demand large upfront cash payments for repairs, then disappear or do worthless work.

Front one: the charity that never existed

Fake relief charities are cheap to build and emotionally engineered. A scammer needs a plausible name, a few news photos, a page template, and a payment link, all assembled in an afternoon. The name is the weapon: either something generic and local-sounding, or a real organization's name with a small change.

The URL usually gives it away before the page does. The classic fake-charity domain bolts words like relief, fund, victims, or the state name onto a plausible charity name, swaps .org for .com or .info, or adds a hyphen the real organization does not use. A pattern like [charity-name]-floodrelief[.]com, registered days after the disaster, is the shape to distrust. Established charities almost never spin up a new domain for one disaster; they add a page to the site they have run for years.

The same lure arrives by text and email: a short emotional message, a donation link, sometimes a spoofed sender name borrowed from a real relief group. Treat it like any unsolicited link, a subject our complete guide to text message scams covers in depth. Never donate through a link that came to you. Go to the organization yourself.

Front two: the payment handle that is almost right

The Center Point Volunteer Fire Department in Kerr County ran search and rescue operations during the July 2025 flooding even as floodwater destroyed most of its own station. When the department, a registered 501(c)(3), posted its Venmo handle so supporters could help it rebuild, copycat accounts appeared almost immediately. KXAN reported roughly half a dozen false accounts set up to divert donations before Venmo locked them down.

On July 17, 2025, Attorney General Paxton announced an investigation into these payment-platform impersonation schemes, describing bad actors who used payment processors to collect donations under false pretenses and calling the conduct "sick and disgusting." When the Hill Country flooded again in mid-July 2026, his office issued a fresh consumer alert within a day, repeating the practical rules: never wire money or confirm bank, card, or Social Security details for someone who solicited you.

The mechanic defeats careful people. Peer-to-peer payments are instant and effectively irreversible, and a handle is trivially imitable: an added underscore, a doubled letter, "TX" appended. When a donation drive goes viral as a screenshot, thousands of people type a handle they saw in an image, with no way to tell the real one from a copy. We covered how loose the trust model on these rails is in the Venmo accidental payment scam and the Cash App fake support refund scam. The fix is absolute: take a payment handle only from the charity's own website or verified profile, never from a shared graphic or a reply.

Front three: the FEMA worker who wants a fee

Once federal disaster assistance opens, scammers pivot from donors to victims, arriving by call, text, email, or a knock on the door, offering to file your FEMA application, speed up your grant, or perform a required "inspection," for a fee, usually cash up front.

One rule collapses this entire front. On its official disaster fraud page at fema.gov, FEMA states that federal agencies, including FEMA and the Small Business Administration, never charge for disaster assistance or for help applying for it. No application fee, no inspection fee, no processing fee, no expediting fee. Anyone asking for money in FEMA's name is an impersonator by definition, however convincing the badge or paperwork. Real FEMA personnel carry photo ID, and you can verify any contact by calling FEMA at 800-621-3362.

The FTC has published its own alert on FEMA impersonators because the pattern repeats after every declared disaster. It is the same family as the fake agency calls in our guide to bank and government imposter scams: borrow a trusted institution's authority, invent a step that requires payment or personal data, add a deadline. Report FEMA impersonation to the federal Disaster Fraud Hotline at 866-720-5721.

Front four: the contractor who needs cash today

The last front is often the most expensive. Out-of-area "contractors" canvass flooded neighborhoods offering fast repairs, debris removal, or roof and foundation work. The tells are consistent: a large deposit or full payment in cash, no written contract, a promise to "handle your insurance," and pressure to decide today because the crew is "leaving tomorrow."

The defenses are offline and old-fashioned: written estimates from more than one contractor, verified licensing and insurance, a BBB check on the company, never paying in full up front, and paying by card or check so a dispute path exists. A deposit demanded in gift cards is an automatic scam, the same untraceable-payment mechanic we documented in the gift card payment scam. Texas law adds a layer: Paxton's alert reminded businesses that "it is illegal for a business or individual to price gouge and unreasonably raise the cost of goods during a declared disaster." Report price gouging and contractor fraud to the Texas Attorney General's Consumer Protection Division at 800-621-0508 or online at texasattorneygeneral.gov.

Seven checks before you donate

Verification takes about three minutes, less than the scam pages spent choosing their photos. Run these in order:

1. Search the exact organization name. Look it up on give.org (the BBB Wise Giving Alliance) and charitynavigator.org. Sound-alike names are the oldest trick in charity fraud, so match the name word for word.
2. Confirm tax-exempt status with the IRS. The Tax Exempt Organization Search on irs.gov shows whether an organization is registered and eligible to receive tax-deductible donations. A "charity" with no entry there and no EIN is not a charity.
3. Type the charity's web address yourself. Never reach a donation page through a link in a text, email, DM, or ad. Go to the organization's known site and use its own donate button.
4. Read the domain. An extra hyphen, a swapped ending, or a charity's name with relief or fund bolted on are the fake-charity signatures. If the domain was registered this month, do not send it money.
5. Confirm the payment handle at the source. If you give through Venmo, Cash App, Zelle, or PayPal, take the handle from the charity's own website or verified profile, character by character. Screenshots and reshared graphics are where the copycat handles live.
6. Treat urgency as a signal, not a reason. Legitimate relief organizations need money next week too. Countdown pressure, graphic imagery pushed with a payment link, and "only today" framing are conversion tactics, and fraud is a conversion business.
7. Check the link before your money moves. Paste any donation URL into our free URL checker and let it check the domain age, blocklists, and page content before you type a card number.

Check the donation page before your heart does

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI. Disaster-fraud pages are born clean: hours old, on no blocklist, no history. That is exactly the case the layers are stacked for.

• Layer 1 - Local detection: 60+ URL patterns and a 550+ brand database run inside the browser before the page renders. A relief brand's name on a domain that organization does not own, hyphenated relief-and-fund keyword constructions, and newly registered lookalike hosts add weight instantly, with no network call.
• Layer 2 - API checks: Google Safe Browsing, PhishTank, URLhaus, ScamAdviser feeds, and 30+ scam TLD lists, aggregated server-side. Disaster-scam domains get reported in volume once a campaign spreads, so this layer catches fakes that are hours-to-days old.
• Layer 3 - AI deep scan (Premium): AI content analysis via our proxy reads the page the way a trained fraud reviewer would. On a fake charity page the combination is distinctive: a donation form routing to a personal payment handle, urgency copy stacked on disaster imagery, no EIN, no physical address, no history beyond this week, and a payout name that does not match the organization the page claims to be. That cluster scores as fake even on a brand-new domain that appears on no list anywhere.

The honest limit: SafeBrowz checks the donation link or page you open. It cannot vet a contractor at your door or a cash request made face to face; for those fronts, the Attorney General's and BBB's steps above are the real defense. What it adds is a verdict on every link that does pass through your browser, where fronts one and two live.

Detection signatures are derived from threat-intelligence research and our internal brand database, not from user browsing data. SafeBrowz does not store per-user browsing history.

Frequently asked questions

How can I tell if a Texas flood charity is legitimate before donating?

Verify it in three places before any money moves. Search the exact organization name on give.org (BBB Wise Giving Alliance) and charitynavigator.org, and confirm its registration in the IRS Tax Exempt Organization Search at irs.gov. Then type the charity's web address yourself rather than following a link from a text, ad, or social post, and take any payment handle only from that site. Watch for sound-alike names and brand-new domains with words like relief or fund attached.

Does FEMA charge a fee for disaster assistance?

No, never. FEMA states that federal agencies, including FEMA and the Small Business Administration, do not charge for disaster assistance, applications, inspections, or help filling out forms. No processing fee, no expediting fee, no inspection fee. Anyone demanding payment in FEMA's name is an impersonator. Verify any contact by calling FEMA directly at 800-621-3362, and report impersonators to the federal Disaster Fraud Hotline at 866-720-5721.

Is it safe to donate through Venmo, Cash App, or Zelle after a disaster?

Only if you confirm the handle at the source. Peer-to-peer payments are instant and very hard to reverse, and after the July 2025 Texas floods copycat accounts impersonated a real volunteer fire department's Venmo handle within hours. Take the handle character by character from the charity's own website or verified profile, never from a screenshot or a reshared graphic. When possible, a card donation through the charity's official site gives you a record and a dispute path that instant payment apps do not.

What should I do if I already gave money to a fake flood charity?

Act on the payment first: if you paid by card, contact your issuer immediately and dispute the charge; if you paid through a payment app, report the transaction in the app and to your bank. Then report it: the Texas Attorney General's Consumer Protection Division at 800-621-0508 or online, the FTC at ReportFraud.ftc.gov, and the federal Disaster Fraud Hotline at 866-720-5721. Keep screenshots of the page, the handle, and the receipt. If you entered personal or bank details, watch your accounts and consider a credit freeze.

How do I report a Texas flood scam or price gouging?

Report both to the Texas Attorney General's Consumer Protection Division, by phone at 800-621-0508 or through the online complaint form at texasattorneygeneral.gov. Price gouging, unreasonably raising the price of essentials during a declared disaster, is illegal under Texas law and was the subject of a consumer alert after the July flooding. FEMA impersonation and other federal disaster fraud goes to the Disaster Fraud Hotline at 866-720-5721; online fraud can also be filed with the FBI at ic3.gov.

Last updated 2026-07-20