Solo Attorney Impersonation Scams Leave Clients With No One Else to Call

A solo attorney's whole practice runs through one phone number and one inbox. That is most of the appeal for clients — they text the lawyer, the lawyer texts back, nobody is in between. It is also what makes a solo attorney impersonation scam so difficult for a client to catch. When a message arrives claiming to be from their lawyer, there is no receptionist to call, no second attorney down the hall, no firm switchboard that routes to a person who can say "yes, that was her."

The raw material for the impersonation is public on purpose. The Virginia State Bar warned on May 1, 2026 that scammers are "harvesting attorneys' names and bar numbers from publicly available state bar websites and using that information to impersonate real, licensed practitioners." The bar's advice to the public is to look an attorney up in its own search tool rather than trust credentials that arrive unsolicited. That advice is sound, and it answers a real question: does this lawyer exist and is she in good standing. It does not answer the question the client is actually stuck on, which is whether the text on their screen came from her.

Why Solo Attorney Impersonation Scams Are Harder to Catch at a One-Person Practice

Someone impersonating a sixty-lawyer firm has to survive a client picking up the phone and calling the main line, where a real employee answers and the story falls apart. A solo practitioner has no main line. The number on the website is the same number the client already has in their contacts, and the person who would confirm or deny the message is the same person the scammer is pretending to be.

The Washington State Bar Association posted a notice in June 2025 about someone impersonating a Washington attorney — "including creating a fake bar card, WSBA profile, and text account using the attorney's name and bar number." That is a one-person practice reproduced end to end: the credential, the directory listing, and the channel clients actually use to reach their lawyer. There was nothing left over for a client to check against.

The Attorney Usually Finds Out Last

In the Virginia alert, some of the impersonated lawyers only learned what was happening when victims contacted them directly to ask whether they were involved. A larger firm has an office manager fielding odd calls, a marketing person watching the firm's name, sometimes an IT vendor with alerting. A solo has none of that, so the first signal is usually a confused or angry phone call from someone who has already sent money or handed over documents.

By then the practitioner is doing damage control on a situation she had no visibility into and no ability to prevent.

Your Real Messages Now Look Like the Fake Ones

The second cost is quieter and lands entirely on the honest lawyer. Everything a solo practitioner does in the normal course of business matches the profile clients are being told to distrust: a text about a filing deadline from a number they don't have saved, an email confirming wire instructions before a disbursement, a message on a Sunday night because that is when a solo catches up on the week.

A more recent WSBA notice, from June 2026, describes scammers using publicly available attorney names, bar numbers, and directory listings to build fake documents circulated over WhatsApp and social media — the same channels a solo immigration or family lawyer genuinely uses to reach clients who don't check email. The more carefully clients are warned, the more hesitation gets attached to legitimate, time-sensitive messages. A client who waits two days to respond to a real deadline notice because it "felt like one of those scams" has cost the practice something real, and no fraud was even committed.

What a Bar Lookup Cannot Settle

Licensure lookups are a good tool aimed at a different question. They confirm that a name belongs to a licensed attorney. They cannot tell a client that the specific email, text, or WhatsApp message in front of them was sent by that attorney, and a scammer citing a real bar number is counting on the client to treat the first answer as the second one. How verification works is built around that narrower question — not who exists, but who authorized this.

A Checkable Identity for a Practice of One

The practical fix for a solo is to give clients something to check that does not depend on reaching the lawyer to ask. A permanent Human ID, tied to the practitioner and displayed the same way in an email signature, a text, or a first-meeting handout, lets a client confirm for themselves that the person contacting them is who they claim to be. For a message that matters — wire instructions, a settlement disbursement, a signature request — a per-message code lets the client check that this particular communication was personally reviewed and authorized.

The boundaries are worth stating plainly, because overselling this is its own kind of harm. Verification does not certify that the content of a message is accurate, it does not detect a fraudulent message, and it makes no claim that a message was written without the help of AI. AI can help write the message; verification tells a client who is willing to stand behind it.

Do It While It Is Still Cheap

A solo practice has one advantage here that a large firm does not: setting this up takes one person an afternoon, not a compliance committee. Getting a Human ID and putting it in an email signature and an intake packet is roughly the effort of updating a letterhead.

The alternative is finding out the way the Virginia attorneys did — from a stranger on the phone asking why you took their money, about a message you never sent, from an account you do not control.