Scam Detective
Scam verdict · Educational pattern check
Scam Detective research desk · Updated September 2026
The fee is fake

“Pay Now or Your Loved One Stays in Jail” — The Arrest Is Real. The Fee Isn't. (2026)

The arrest may be real — the fee never is. Scammers are monitoring public jail booking records and calling families within hours of a real arrest, often spoofing the sheriff's office's actual number, with the real name, charges, and booking date in hand. The offer — “early release due to overcrowding,” a supervised-release program, an ankle monitor — always ends in an immediate fee by gift card, crypto, wire, Zelle, Cash App, or a barcode scanned at a gas station, and a second fee often follows the first. Bitdefender documented the wave August 28, 2026, including a Minnesota family that wired $1,800 for a real relative's real arrest. Verify at the jail yourself — never pay a caller.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL freeRead the full guide

From the research desk — this pattern is one of those documented in This Week's Scam Wave, in Numbers — September 15, 2026 →

Why now · September 2026

Why you’re seeing this now

This scam works because part of it is true: scammers are monitoring public jail booking records and calling families within hours of a real arrest, often spoofing the sheriff's office's actual phone number. The caller knows the real name, charges, and booking date, then offers “early release due to overcrowding,” a supervised-release program, or an ankle monitor — but only after an immediate fee, paid by gift card, crypto, wire, Zelle, Cash App, or even a barcode scanned at a gas station. Bitdefender published a full breakdown August 28, 2026, after county warnings piled up: a Minnesota family wired $1,800 for a real relative's real arrest, and sheriff's offices in Texas, Georgia, Virginia, and elsewhere issued alerts through early September. The usual advice — hang up and verify the arrest yourself — doesn't work here, because the arrest actually happened. Only the demand for money is invented, and a second “fee” often follows the first payment.

The script · As it arrives — phone call, spoofed as the sheriff's office

The exact words they use

Quoted from documented versions of this script so you can recognize it on sight. The words are the scammer’s — the patterns inside them are what give the con away.

“Eligible for early release because of overcrowding.”

“Needs an ankle monitor before release.”

“Will remain in custody unless the family pays immediately.”

Script language quoted for recognition — if the message in your hand reads like this, you already have your verdict.

The checklist

Five red flags — any one is enough

The caller already knows real, correct booking details — name, charges, date.
Caller ID appears to be the sheriff's office's real number (spoofed).
Payment demanded immediately via gift card, crypto, wire, Zelle/Cash App, or a scanned barcode.
The story includes an invented “early release,” “ankle monitor,” or “processing fee” before release.
A second, additional fee gets requested after the first one is paid.
What to do now

Your next three moves

1
Verify through a channel you open yourself: hang up and call the jail or sheriff's office on the published number you look up independently — not the number that called you — and ask about your relative's real status and the actual release process.
2
Refuse the fee, whatever it's called — “early release,” ankle monitor, or processing. Real release is never conditioned on an immediate phone payment by gift card, crypto, wire, Zelle, Cash App, or a barcode scanned at a gas station.
3
Report the call at reportfraud.ftc.gov and to the real sheriff's office — counties in Texas, Georgia, Virginia, and elsewhere have active alerts — and check any number or link the caller used via the $2 instant check.
Instant URL Check · $2, one-time
Holding the actual message? Check the exact link, number, or sender.
Paste it into the instant check — free risk signal in 60 seconds, then the full report for $2: a 0–100 scam risk score, a plain-English verdict, the top 5 red flags found, and a 3-step what-to-do-now list. No subscription.
Run the $2 instant check
Follow-up questions

People also ask

The caller knew my relative's real name, charges, and booking date — how is that fake?

Booking records are public, and the scammers monitor them — that's why the call comes within hours of a real arrest with real details. The arrest actually happened; only the demand for money is invented.

Caller ID showed the sheriff's office's real number — doesn't that prove it?

No — the number is spoofed. The scam's documented versions display the sheriff's office's actual phone number, which is exactly why families believe it.

Does “early release because of overcrowding” ever work this way?

Not by phone and not for a fee. “Early release,” “supervised release,” and “ankle monitor” are documented script lines; real release processes don't demand instant payment from family members over the phone.

We paid the first fee — why are they asking for more?

A second “fee” often follows the first payment — paying once marks you as willing. Stop, verify directly with the jail on a number you look up yourself, and report both demands.

Related verdicts

People asking this also asked

I got a call saying I missed jury duty and there's a warrant for my arrest — is it a scam?Yes — scamCan a scammer really clone a family member's voice?Yes — verify firstIs that Wells Fargo / Bank of America fraud call or text real?Verify it yourself
← Browse all 218 answers
$2, one time
No subscription, no account, nothing to cancel.
Verdict in minutes
Full report on screen and as a PDF, usually within minutes.
Honest verdicts
If it looks safe, we say so — a clear “safe” is worth $2 too.
Got a link of your own?

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Check a URL free
Spot the scam before it spots you.
For businesses · $19, one-time
Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $19
Free brand scan first — you only pay for the full audit.