What are the red flags of this scam?

The link in the text takes you to a domain with words like 'official,' 'donate,' 'store,' or a .us TLD instead of the real campaign's URL • Real donations through ActBlue or WinRed show secure.actblue.com or secure.winred.com in the address bar — any variation is a clone • The text promises a 200%–800% donation match and insists you act 'in the next 10 minutes' — legitimate campaigns do not use countdown pressure • An AI voice that sounds like the candidate or a robocall solicits a credit card number directly over the phone — real campaigns take donations online through their official site • Merchandise orders from a campaign store you reached via a text link never arrive and no receipt comes from the campaign • A text says you've been 'chosen' to receive a government dividend related to a policy announcement — the government does not select recipients by text

What should I do if this happened to me?

Type the campaign's official web address yourself — never follow a donation link in a text, email, or social media ad without first verifying the URL matches the real domain exactly • Before donating, confirm the payment page shows secure.actblue.com or secure.winred.com — scammers add 'official' or swap '.com' for '.us' to mimic the real processors • If you entered card details on a suspicious page, call your card issuer immediately to dispute the charges and replace your card • Report fake campaign donation sites to the FEC at https://www.fec.gov/contact/ and to CISA at https://www.cisa.gov/report • Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.

HIGH phishing Last reported: Oct 23, 2026 Share

A political donation link or "campaign match" text leads to a spoofed fundraising site — not the real campaign

Q: Is this a scam?

Yes. This is a documented scam pattern. Scammers clone campaign donation platforms and candidate storefronts ahead of the 2026 midterms. "Campaign match" texts and fake ActBlue/WinRed pages harvest credit cards. Over 5,150 malicious election domains were registered for this cycle.

Scammers clone campaign donation platforms and candidate storefronts ahead of the 2026 midterms. "Campaign match" texts and fake ActBlue/WinRed pages harvest credit cards. Over 5,150 malicious election domains were registered for this cycle.

Also known as: fake campaign donation site, political fundraising scam, fake ActBlue WinRed site, campaign match text scam, election donation phishing, fake campaign merchandise store, political text donation scam

Already happened to you? Do this in the next few minutes

1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.

What to do right now

1 Type the campaign's official web address yourself — never follow a donation link in a text, email, or social media ad without first verifying the URL matches the real domain exactly
2 Before donating, confirm the payment page shows secure.actblue.com or secure.winred.com — scammers add 'official' or swap '.com' for '.us' to mimic the real processors
3 If you entered card details on a suspicious page, call your card issuer immediately to dispute the charges and replace your card
4 Report fake campaign donation sites to the FEC at https://www.fec.gov/contact/ and to CISA at https://www.cisa.gov/report
5 Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.

Red flags

⚠ The link in the text takes you to a domain with words like 'official,' 'donate,' 'store,' or a .us TLD instead of the real campaign's URL
⚠ Real donations through ActBlue or WinRed show secure.actblue.com or secure.winred.com in the address bar — any variation is a clone
⚠ The text promises a 200%–800% donation match and insists you act 'in the next 10 minutes' — legitimate campaigns do not use countdown pressure
⚠ An AI voice that sounds like the candidate or a robocall solicits a credit card number directly over the phone — real campaigns take donations online through their official site
⚠ Merchandise orders from a campaign store you reached via a text link never arrive and no receipt comes from the campaign
⚠ A text says you've been 'chosen' to receive a government dividend related to a policy announcement — the government does not select recipients by text

Known variants

Voter registration phishing texts tell recipients their voter registration is 'incomplete,' 'flagged,' or 'at risk' and include a link to 're-verify.' The link leads to a lookalike state government site that harvests name, date of birth, address, and SSN last four digits. Early voting for 2026 midterms began Oct 14 and these texts are circulating nationwide.

Last seen: 10/23/2026
Fake campaign merchandise stores copy official candidate storefronts, collect full payment and card details for hats, shirts, and signs, then deliver nothing. The store domain typically adds 'store,' 'official,' or 'shop' to the candidate name.

Last seen: 9/18/2026

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Known variants

Sources